- Create ServiceAccount backend-sa - Create ClusterRole for pod management - Bind role to ServiceAccount - Update deployment to use ServiceAccount - Update backend submodule with TLS fix Co-Authored-By: Claude Sonnet 4.5 (1M context) <noreply@anthropic.com>