bugfixes

deploy/k8s/prod/kustomization.yaml

@@ -15,9 +15,8 @@ resources:
   - infrastructure.yaml
   # Sandbox namespace resources (go to sandbox namespace, not ai)
   - sandbox-config.yaml
-  # gateway-config ConfigMap is intentionally excluded from kustomize.
-  # It contains an op:// reference for the DB password. Apply via:
-  #   bin/config-update prod gateway-config
+  # gateway-config ConfigMap (database URL is in secrets, not here)
+  - configs/gateway-config.yaml
 
 patches:
   - path: patch-gateway-rbac-subject.yaml