Sync the self-hosting stack

kubernetes/kustomization.yaml

@@ -42,6 +42,11 @@ resources:
   # Remove this line if you point REDIS_URL at a managed Redis. It deploys three Redis processes and
   # three sentinels; see the README on what that costs on three nodes.
   - 08-redis-sentinel.yaml
+  # The headless browser and the NetworkPolicy that isolates it. COMMENTED OUT: web access is a
+  # decision rather than a default, and an assistant that can read the internet is a new class of
+  # input into a system that administers customers. Uncomment this AND set BROWSER_URL in
+  # 02-config.yaml to enable it; leaving both alone changes nothing.
+  # - 09-browser.yaml
 
 # ─── THE THREE IMAGES ───────────────────────────────────────────────────────────────────────────
 #