RollingUpdate deadlocks on the ReadWriteOnce longhorn PVC: old and new pods cannot both attach the volume. Recreate terminates the old pod first.
Resolves duplicate GF_SECURITY_ADMIN_PASSWORD env (chart default + envValueFrom) that broke ArgoCD diff and left the grafana Deployment unable to sync.
