kyverno(kube): fix deployment

kubernetes/system/flux/kustomization.yaml

@@ -14,3 +14,4 @@ resources:
   - openclaw-operator.yaml
   - openclaw.yaml
   - kyverno.yaml
+  - kyverno-policies.yaml

kubernetes/system/flux/kyverno-policies.yaml

@@ -0,0 +1,19 @@
+---
+# Flux Kustomization for Kyverno ClusterPolicies.
+# dependsOn "kyverno" (the controller + CRDs) so the kyverno.io/v2 CRD exists
+# before Flux dry-runs the ClusterPolicy. Without this split, Flux fails the
+# whole Kustomization at dry-run ("no matches for kind ClusterPolicy").
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: kyverno-policies
+  namespace: flux-system
+spec:
+  interval: 5m
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: homeprod
+  path: ./kubernetes/system/kyverno-policies
+  dependsOn:
+    - name: kyverno