fix: vendor critical bootstrap charts

.gitea/workflows/deploy.yml

@@ -948,6 +948,7 @@ jobs:
           B2_ACCOUNT_ID: ${{ secrets.B2_ACCOUNT_ID }}
           B2_APPLICATION_KEY: ${{ secrets.B2_APPLICATION_KEY }}
         run: |
+          set -euo pipefail
           echo "Finding latest backup in B2..."
 
           CREDS=$(echo -n "${B2_ACCOUNT_ID}:${B2_APPLICATION_KEY}" | base64)
@@ -985,14 +986,15 @@ jobs:
           ")
 
           if [ "$LATEST" = "NONE" ]; then
-            echo "No backups found in B2. Skipping restore."
-            exit 0
+            echo "No Rancher backups found in B2; refusing to continue without restored Rancher state." >&2
+            exit 1
           fi
 
           BACKUP_FILE=$(basename "$LATEST")
           echo "Latest backup: ${BACKUP_FILE}"
 
           echo "Creating Restore CR..."
+          kubectl -n cattle-resources-system delete restore restore-from-b2 --ignore-not-found
           kubectl apply -f - <<EOF
           apiVersion: resources.cattle.io/v1
           kind: Restore
@@ -1022,7 +1024,9 @@ jobs:
             fi
             sleep 10
           done
-          echo "Restore did not complete within timeout. Continuing anyway."
+          echo "Restore did not complete within timeout." >&2
+          kubectl -n cattle-resources-system describe restore restore-from-b2 || true
+          exit 1
 
       - name: Seed observability runtime images
         run: |