fix(cd): keep database verifier non-disruptive

scripts/ops/awoooi-workload-db-identity-bootstrap.sh

@@ -410,10 +410,21 @@ spec:
           try:
               asyncio.run(main())
           except Exception as exc:
+              safe_error_codes = {
+                  "representative_probe_count_invalid",
+                  "connection_limit_mismatch",
+                  "connection_budget_below_required",
+                  "connection_headroom_below_required",
+                  "database_privilege_gap",
+              }
+              error_code = str(exc)
+              if error_code not in safe_error_codes:
+                  error_code = "workload_database_preflight_failed"
               print(json.dumps({
                   "status": "failed",
                   "workload": os.environ.get("WORKLOAD_ID", "unknown"),
                   "error_type": type(exc).__name__,
+                  "error_code": error_code,
                   "secret_value_exposed": False,
                   "secret_value_logged": False,
               }, separators=(",", ":")))