Platform-team owned, cluster-scoped only: Kong Gateway Operator install
(Helm chart or OLM Subscription on OpenShift). Rare changes, cautious sync
(not aggressive auto-sync).
Per-domain gateway infrastructure (DataPlane/KonnectExtension) does NOT
live here — see the dedicated dataplane-<domain> repos, to avoid write
contention across domains.