manna: written by the system's own hand each morning; Friday's double stands on Shabbat

Shemot 16: dvar yom b'yomo, and on the sixth day double, and none on the
seventh. Every night at 00:00Z the day's provision went stale and the
readiness probe failed until someone woke — 13.5 hours on 2026-10-15.
CronJob `manna` (deploy/k8s/manna-cronjob.yaml) runs at 00:01Z Sunday to
Friday in our own korban-processor image, mounts the manna PVC as the
app's uid, and writes today.json from the ConfigMap's MANNA_* amounts —
doubled on Friday, valid to Sunday 00:30Z. The pipeline now accepts
Friday's `double` on Saturday (validate_date/3) and nothing else across a
day boundary; three tests. The kohen sets the amounts, may still write by
hand, and reads a failed job as the Day-4 alarm (KOHEN "The manna, each
morning"; Tamid §1.1). Doorpost re-pinned. Elixir green.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

deploy/k8s/configmap.yaml

@@ -12,6 +12,16 @@ data:
   # Manna provision file location
   MANNA_PROVISION_FILE: "/var/lib/bikoret/manna/today.json"
 
+  # The day's portion, written by the manna CronJob at 00:01Z Sunday to
+  # Friday (manna-cronjob.yaml); Friday's is doubled and stands through
+  # Shabbat. The kohen sets the amounts here (Pekudei: from the half-shekel
+  # fund); a change takes effect at the next writing.
+  MANNA_COMPUTE_UNITS: "1000"
+  MANNA_MEMORY_MB: "32768"
+  MANNA_API_CALLS_EXTERNAL: "500"
+  MANNA_STORAGE_DELTA_MB: "100"
+  MANNA_SANHEDRIN_PANELS_MAX: "5"
+
   # Talmudic Engine socket
   TALMUDIC_SOCKET_PATH: "/tmp/bikoret/talmudic.sock"