chore(deploy): point prod overlay at sha-cfdd091d (not synced - manual gate in ArgoCD) [skip ci]

deploy/k8s/overlays/prod/image-tag/kustomization.yaml

@@ -1,12 +1,11 @@
-# Owned by CI (the bump-prod job in .gitlab-ci.yml), not by hand — same
-# reasoning as overlays/dev/image-tag/. Starts pointed at an obviously-fake
-# tag on purpose: nothing has been promoted yet, and vncmail-prod's ArgoCD
-# Application has manual sync anyway, so this being "wrong" doesn't deploy
-# anything wrong — it just means there's nothing to sync until a real
-# `git push` to main updates it.
+# Owned by CI (bump-prod job in .gitlab-ci.yml) - regenerated every
+# push to main. Do not hand-edit; edits here get overwritten. Bumping
+# this is NOT the same as deploying it - vncmail-prod's ArgoCD
+# Application has manual sync, see the note in the parent
+# kustomization.yaml.
 apiVersion: kustomize.config.k8s.io/v1alpha1
 kind: Component
 images:
   - name: vncmail-plus
     newName: registry.gitlab.vnc.biz/gitlab-instance-b9b5cf2f/vncmail-plus
-    newTag: not-yet-promoted
+    newTag: sha-cfdd091d