redesign fully scaffolded and web login works

deploy/k8s/base/gateway-rbac.yaml

@@ -7,7 +7,6 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: gateway
-  namespace: dexorder-system
 ---
 # Role scoped to dexorder-agents namespace only
 apiVersion: rbac.authorization.k8s.io/v1
@@ -20,27 +19,27 @@ rules:
   - apiGroups: ["apps"]
     resources: ["deployments"]
     verbs: ["create", "get", "list", "watch", "patch", "update"]
-  
+
   # PVCs: create and read (deletion handled by sidecar)
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["create", "get", "list", "watch"]
-  
+
   # Services: create and manage agent MCP endpoints
   - apiGroups: [""]
     resources: ["services"]
     verbs: ["create", "get", "list", "watch", "patch", "update"]
-  
+
   # Read-only pod access for status checks (no exec!)
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list", "watch"]
-  
+
   # Pod logs for debugging (read-only)
   - apiGroups: [""]
     resources: ["pods/log"]
     verbs: ["get"]
-  
+
   # Explicitly NOT included:
   # - deployments/delete - handled by lifecycle sidecar
   # - pvc/delete - handled by lifecycle sidecar
@@ -58,7 +57,7 @@ metadata:
 subjects:
   - kind: ServiceAccount
     name: gateway
-    namespace: dexorder-system
+    namespace: default
 roleRef:
   kind: Role
   name: agent-creator