Templates under idwms/, CI syncs to Consul via K8s secrets. Co-authored-by: Cursor <cursoragent@cursor.com>