Refactor noble cluster configurations to transition from the deprecated apps structure to a streamlined bootstrap approach. Update paths in various YAML files and README documentation to reflect the new organization under clusters/noble/bootstrap. This change enhances clarity and consistency across the deployment process, ensuring that all components are correctly referenced and documented for user guidance.

clusters/noble/bootstrap/kyverno/policies-values.yaml

@@ -1,12 +1,12 @@
 # kyverno/kyverno-policies — Pod Security Standards as Kyverno ClusterPolicies
 #
 # helm upgrade --install kyverno-policies kyverno/kyverno-policies -n kyverno \
-#   --version 3.7.1 -f clusters/noble/apps/kyverno/policies-values.yaml --wait --timeout 10m
+#   --version 3.7.1 -f clusters/noble/bootstrap/kyverno/policies-values.yaml --wait --timeout 10m
 #
 # Default profile is baseline; validationFailureAction is Audit so existing privileged
 # workloads are not blocked. Kyverno still emits PolicyReports for matches — Headlamp
 # surfaces those as “policy violations”. Exclude namespaces that intentionally run
-# outside baseline (see namespace PSA labels under clusters/noble/apps/*/namespace.yaml)
+# outside baseline (see namespace PSA labels under clusters/noble/bootstrap/*/namespace.yaml)
 # plus core Kubernetes namespaces and every Ansible-managed app namespace on noble.
 #
 # After widening excludes, Kyverno does not always prune old PolicyReport rows; refresh:
@@ -25,7 +25,7 @@ validationFailureAction: Audit
 failurePolicy: Fail
 validationAllowExistingViolations: true
 
-# All platform namespaces on noble (ansible/playbooks/noble.yml + clusters/noble/apps).
+# All platform namespaces on noble (ansible/playbooks/noble.yml + clusters/noble/bootstrap).
 x-kyverno-exclude-infra: &kyverno_exclude_infra
   any:
     - resources: