Merge milestone/v1.14-refinement — v1.14 complete (NFR Refinement: bug fixes, security, stubs, tests, docs; 20 phases + final; tag v1.13.24)

v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) +
1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security
posture hardened (swallowed errors, account ID externalized, IAM scoped,
schema validation, credential hygiene). Stubs resolved (kyverno --kube-
version removed). 7 untested scripts gained coverage. Documentation
synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13,
GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral
recorded). Platform VPC parameterized.

561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified.
6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001)
auto-resolved at full autonomy (D-101).

---ci---
project: acdl
phase: 21
milestone: v1.14
status: complete
---/ci---

tests/test_kyverno_adapter.py

@@ -211,11 +211,13 @@ class TestFleshedOutTranslator:
         assert pcrs[0]["result"] == "skipped"
         assert "Terraform" in pcrs[0]["message"]
 
-    def test_kube_version_parsed(self, tmp_path):
-        """--kube-version is parsed but not yet used (future GitOps)."""
+    def test_kube_version_removed(self, tmp_path):
+        """v1.14 (G-103): --kube-version flag removed; adapt() no longer
+        accepts kube_version parameter. Version-aware policy selection
+        deferred to GitOps reconciler (D-053)."""
         f = tmp_path / "k.json"
         f.write_text(json.dumps({"results": [
             {"policy": "p", "rule": "r", "severity": "low", "result": "pass", "resource": "x"},
         ]}))
-        results = adapt(str(f), "c8", kube_version="1.28")
+        results = adapt(str(f), "c8")
         assert len(results) == 1