docs(control-plane): specify periodic world synchronization

[jhjaggars]

Summary

• Define periodic control-plane world synchronization with initial recovery, paginated API inventory, revision-aware queues, and bounded retry behavior.
• Specify control-plane-only RoleBinding inventory and safe Keycloak role projection recovery.
• Define ownership-validated, independently opt-in ManagedDatabase orphan cleanup and align database/Keycloak/namespace-GC contracts.
• Register the new and related specifications in the reconciliation index.

Safety and compatibility

• Existing Gateway reconnect seeding remains in place; periodic synchronization must not force Gateway phases or fight the health reconciler.
• Destructive ManagedDatabase cleanup is disabled by default and requires complete inventory, exact ownership labels, a persisted grace period, and a pre-delete recheck.
• Historical ManagedDatabase resources receive ownership-label backfill only after positive legacy ownership validation; matching unmanaged namespaces are never adopted.
• Keycloak bridge role projection is limited to HyperShell-managed clients and the two bridge-owned roles.

Validation

• make check
• git diff --check
• Amber review completed locally; no actionable findings remain.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 35829d3f-57e4-4821-bf4a-df2df56d1d64

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}