Argo CD can't sync tesks apps: invalid gitops repo credential (ParadauxIO/gitops)

Problem

Argo CD cannot read https://github.com/ParadauxIO/gitops.git, so it can't compute desired state or sync. tesks-development app condition:

ComparisonError: Failed to load target state: failed to generate manifest ...
failed to list refs: authentication required: Invalid username or token.
Password authentication is not supported for Git operations.

Started ~2026-06-16 12:34. Sync status Unknown on tesks-development, tesks-ui-development; tesks-production is Degraded. automated+selfHeal are on but can't act because the comparison itself fails.

Impact

Image Updater still commits new image tags to gitops (its creds work), but Argo can't apply them — so deploys silently stall on the old image. Concretely it blocked the PAR-204 MCP fix from rolling out (had to be applied manually).

Fix

Rotate Argo CD's repository credential for ParadauxIO/gitops — update the repository secret in the argocd namespace to a valid GitHub PAT (GitHub no longer accepts HTTPS password auth) or switch to an SSH deploy key. Then confirm all three apps go Synced/Healthy and reconcile to their gitops-pinned images.

Acceptance

• tesks-development / tesks-ui-development / tesks-production show Synced + Healthy.
• A fresh push deploys end-to-end without manual kubectl set image.

Infra/ops — surfaced while shipping PAR-204.