Controller pod runs but never acts

A controller upgrade follows public guidance. The pod restarts cleanly, but reconciliations stop because the leader-election path cannot update its lease object.