++ camunda legacy wait

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

clusters/stand/layers.yaml

@@ -61,7 +61,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m0s
-  timeout: 20m0s
+  timeout: 35m0s
   path: ./clusters/stand/30-platform
   prune: true
   wait: true

infrastructure/camunda/contour-template/camunda.yaml

@@ -6,7 +6,9 @@ metadata:
 spec:
   dependsOn: []
   interval: 5m
-  timeout: 15m
+  timeout: 30m
+  waitStrategy:
+    name: legacy
   postRenderers:
     - kustomize:
         patches:

infrastructure/zitadel/contour-template/zitadel.yaml

@@ -110,6 +110,17 @@ spec:
       configmapConfig:
         ExternalDomain: ${HOST_LOGIN}
         ExternalSecure: true
+        # IAM_OWNER service user for sarexctl phase zitadel-setup; the chart stores its key
+        # in secret zitadel/sarex-installer. Created only on the first instance setup.
+        FirstInstance:
+          Org:
+            Machine:
+              Machine:
+                Username: sarex-installer
+                Name: sarexctl
+              MachineKey:
+                ExpirationDate: "2099-01-01T00:00:00Z"
+                Type: 1
       debug:
         enabled: false
     postgresqlSecret: