Block a user
Provisioning v2: data-only secrets manifest + full-file env templates + generic provisioner (ai stack first)
FlowAgent MCP cutover: point ai.yaml's mcpo at flowagent-mcpo image + wire Azure secrets (matched pair)