Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

refactor(npnrecovery): read NPNs through the cached client

Use kubeClient instead of an uncached apiReader to look up NativePodNetworks,
as suggested in review, so frequent reconciles do not hit the API server. The
vcn-native-ip-cni role KPO is bound to already grants list and watch, so the
informer needs no new RBAC. A stale cache miss is harmless because the Create
that follows ignores AlreadyExists.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>