chore(arc-tf): drop ineffective listener-resource workarounds

workloads/arc/arc-tf-application.yaml

@@ -35,34 +35,22 @@ spec:
               - name: runner
                 image: ghcr.io/makeitworkcloud/tfroot-runner:latest
                 command: ["/home/runner/run.sh"]
-  # The gha-runner-scale-set controller creates the listener AutoscalingListener
-  # and a paired Role/RoleBinding at runtime (named `<release>-<hash>-listener`),
-  # then continually rotates hash annotations on them. None of these are in the
-  # chart's rendered output. Ignore field-level drift, and rely on ServerSideApply
-  # so ArgoCD doesn't try to manage fields the controller owns.
+  # The gha-runner-scale-set controller mutates AutoscalingRunnerSet at runtime
+  # (hash annotations propagate down through spec.template); ignore those drifts
+  # so selfHeal doesn't thrash on every reconcile. The dynamically-created
+  # listener resources (AutoscalingListener + paired Role/RoleBinding) are
+  # cosmetically reported as OutOfSync because the chart doesn't render them
+  # and ArgoCD's label-based tracking still claims them — Health stays correct
+  # and Synced won't follow without a cluster-wide tracking-method change.
   ignoreDifferences:
-    - group: actions.github.com
-      kind: AutoscalingListener
-      jsonPointers:
-        - /metadata/annotations
-        - /spec
     - group: actions.github.com
       kind: AutoscalingRunnerSet
       jsonPointers:
         - /metadata/annotations
         - /spec/template
-    - group: rbac.authorization.k8s.io
-      kind: Role
-      jsonPointers:
-        - /metadata/annotations
-    - group: rbac.authorization.k8s.io
-      kind: RoleBinding
-      jsonPointers:
-        - /metadata/annotations
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
     syncOptions:
-      - ServerSideApply=true
       - RespectIgnoreDifferences=true