Added Traefik-only NetworkPolicy support. Replaced ConfigMap-based probe script with inline exec probes. Hardened waveform data download behavior. Fixed Helm securityContext scope placement (issue #21). Upgraded Redis Helm chart to major version 25.3.2. Switched ConfigMap naming to release-derived names. Hardened SciToken RBAC and consolidated SciToken templates. Added configurable Traefik ingress middlewares. Updated SciToken handling to use igwn-robot-get. Made Traefik ingress entryPoint configurable. Made GraceDB CA wiring optional when caSecret is empty.