Adds accounts.jenkins-ci (apiKey) and a repo-scoped RBAC policy (sync/get on default/demo-go-app only) so devops-lib's syncArgoApp stage can trigger syncs without full admin access.
Adds accounts.jenkins-ci (apiKey) and a repo-scoped RBAC policy (sync/get on default/demo-go-app only) so devops-lib's syncArgoApp stage can trigger syncs without full admin access.