Maintenance notes

We intentionally avoid assumptions about UID/GID/FSGroup under OpenShift restricted SCC.

If PVC permissions ever wedge, prefer:
- designing the container entrypoint to `umask 0002` and create needed dirs/files with group-writable perms, OR
- use an initContainer that only does `chmod -R g+rwX` (no chown) if your cluster policy allows.

Avoid hardcoding specific numeric UIDs/GIDs.