Constant MISSING_SERVICE_ACCOUNT_REASON 

pub const MISSING_SERVICE_ACCOUNT_REASON: &str = "MissingServiceAccount";

reason/Event reason for CREDENTIALS_AVAILABLE_CONDITION = False when the missing dependency is the workload-identity ServiceAccount the backend’s auth.workloadIdentity names (the user creates it; kopiur never does — its cloud annotations are the user’s federation contract).