Run device plugin as privileged for GPU device node access

NVML needs both libnvidia-ml.so and /dev/nvidia* device nodes.
Mount libs to a non-clobbering path and run privileged (matching
NVIDIA's official deployment) for device file access.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

argocd/manifests/nvidia-device-plugin/daemonset.yaml

@@ -29,11 +29,9 @@ spec:
             - name: CDI_ROOT
               value: /var/run/cdi
             - name: LD_LIBRARY_PATH
-              value: /usr/lib/x86_64-linux-gnu
+              value: /run/nvidia/lib
           securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop: ["ALL"]
+            privileged: true
           volumeMounts:
             - name: device-plugins
               mountPath: /var/lib/kubelet/device-plugins
@@ -41,7 +39,7 @@ spec:
               mountPath: /var/run/cdi
               readOnly: true
             - name: nvidia-libs
-              mountPath: /usr/lib/x86_64-linux-gnu
+              mountPath: /run/nvidia/lib
               readOnly: true
       volumes:
         - name: device-plugins