v0.7.8 — NetworkPolicy, ResourceQuota, LimitRange, ClusterRole, ClusterRoleBinding

Five resource types promoted to first-class Orkestra resources with full profile support, GC, and e2e assertion coverage.

Built-in profiles: NetworkPolicy (deny-all, allow-same-namespace, allow-dns-egress), ResourceQuota (small, medium, large, xlarge). All six profile classes support user-defined presets.

New sub-pack: use-cases/namespace-provisioner — a single CRD that provisions a namespace with quota, RBAC, and network policy in one apply.

New command: ork create pattern scaffolds a complete operator suite from a prompt.