[Mearman]

Allow the disposable mesh role-controller scenarios to pull an explicitly supplied published image, while retaining the checkout build and import by default. The ARC role still renders both workloads without changing their security contexts. Add image selection tests. The Docker-backed canary requires a dedicated disposable daemon and has not been run here.

[Mearman]

@codex security review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-11-05T12:43:45.059095Z	80a25f7	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

🛡️ Codex Security Review

Security review completed. No security issues were found in this pull request.

Reviewed commit: 80a25f74d7

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

[github-actions]

🎉 This PR is included in version 2.41.0 🎉

The release is available on:

• v2.41.0
• GitHub release

Your semantic-release bot 📦🚀