ci: fix runmelast hanging, add proxy CA injection, clean SA/CRD leftovers on redeploy

pipelines/woodpecker/values.yaml

@@ -6,6 +6,9 @@
 server:
   enabled: true
 
+  podAnnotations:
+    celestium.life/inject-ca: "true"
+
   env:
     WOODPECKER_HOST: "https://stonks-ci.celestium.life"
     WOODPECKER_SERVER_ADDR: "0.0.0.0:8000"
@@ -33,9 +36,9 @@ server:
         hosts:
           - stonks-ci.celestium.life
     annotations:
-      cert-manager.io/cluster-issuer: ca-issuer
+      cert-manager.io/cluster-issuer: celestium-le-production
 
-  # NFS-backed persistent volume for SQLite database and build data
+  # Persistent volume for SQLite database and build data
   persistentVolume:
     enabled: true
     size: 5Gi
@@ -46,9 +49,13 @@ agent:
   enabled: true
   replicaCount: 2
 
+  # No proxy CA injection for agents — they only talk to the server internally
+  # Pipeline step pods spawned by the agent inherit the node's proxy config
+
   env:
     WOODPECKER_SERVER: "woodpecker-server:9000"
     WOODPECKER_BACKEND: kubernetes
     WOODPECKER_BACKEND_K8S_NAMESPACE: woodpecker
     WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 5Gi
     WOODPECKER_BACKEND_K8S_STORAGE_RWX: "false"
+    WOODPECKER_MAX_WORKFLOWS: "16"