ArgoCD child apps (e.g. kyverno) get extra finalizers added at runtime,
causing root app-of-apps to show OutOfSync perpetually. Ignore
/metadata/finalizers drift on Application resources.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- argocd-apps/ directory with 7 Application YAMLs matching current specs
- root-app.yaml to manage all Applications from git
- Finalizers added for proper cleanup on deletion