manna: written by the system's own hand each morning; Friday's double stands on Shabbat

Shemot 16: dvar yom b'yomo, and on the sixth day double, and none on the
seventh. Every night at 00:00Z the day's provision went stale and the
readiness probe failed until someone woke — 13.5 hours on 2026-10-15.
CronJob `manna` (deploy/k8s/manna-cronjob.yaml) runs at 00:01Z Sunday to
Friday in our own korban-processor image, mounts the manna PVC as the
app's uid, and writes today.json from the ConfigMap's MANNA_* amounts —
doubled on Friday, valid to Sunday 00:30Z. The pipeline now accepts
Friday's `double` on Saturday (validate_date/3) and nothing else across a
day boundary; three tests. The kohen sets the amounts, may still write by
hand, and reads a failed job as the Day-4 alarm (KOHEN "The manna, each
morning"; Tamid §1.1). Doorpost re-pinned. Elixir green.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

specs/bikoret_tamid.md

@@ -365,6 +365,14 @@ Errors: as /courtyard/bedikah, with "side 'a': …" / "side 'b': …" in the
 message; a missing side is 422.
 ```
 
+**The manna is written by the system's own hand** (2026-10-15): CronJob
+`manna` at 00:01Z Sunday–Friday writes the day's provision onto the manna
+PVC from the ConfigMap's `MANNA_*` amounts; Friday's is a double portion
+that the pipeline accepts on Shabbat (Shemot 16:22–26); nothing is
+written on Shabbat, nothing else crosses a day boundary. The kohen sets
+the amounts and may still write by hand; a failed job is the Day-4 alarm
+(KOHEN "The manna, each morning").
+
 **The names that still carry the old word** (renamed 2026-10-13, PRD §0).
 Everything the specification, the code, the images and the API say is
 *Bikoret*: headers `X-Bikoret-*`, the `bikoret` object on a gate reply,