EDU deployment ownership

Application source and release builds: forust/edu-master. The homelab pipeline deploys edu_master/k8s and preserves explicit image digests. The application copies in this directory are legacy and are not build inputs. Do not publish EDU prod images from homelab or resolve releases from moving tags.

For an EDU release, validate both images, select their digests in the keeper and checker manifests, and run the existing homelab validation/apply/verification helpers against this service. Keep the existing Secret and Redis PVC. Coordinate Redis authentication changes with both clients and all init/probes; keep a pre-rollout Redis backup and both previous compatible image references. The current HTTP checker does not depend on Playwright; check other consumers before removing the separate browser service.