- Add k8s/base/ with deployment and service - Add k8s/overlays/prod/ with environment config
- Migrate secrets to HashiCorp Vault - Use ExternalSecrets operator