PodSecurity admission blocks the debug container flow even though the base workload still runs

The app continues serving traffic, but emergency debugging fails because the current security profile denies the ephemeral container path.