Phase-1 Step 2 rewritten around ansible/mgmt.yml and cluster-api-operator,
version pins for operator/cert-manager/cloud image, decisions #12-14,
execution log and changelog. Phase-1 Step 2 checked off.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
stringData is never stored, so kubectl apply reported "configured" on
every run and the capi play was never changed=0.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>