Captures the full deployment plan for replacing Dex with Authentik as the
BlumeOps identity provider, covering Nix containers, kustomize manifests,
cross-cluster CNPG database, networking, and monitoring across 6 phases.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>