fix(cd): keep deploy markers on controlled profile

ops/runner/test_cd_controlled_runtime_profile.py

@@ -116,6 +116,17 @@ def test_gitea_private_inventory_scorecard_stays_on_controlled_runtime_profile()
         assert source in text
 
 
+def test_cd_deploy_marker_files_stay_on_controlled_runtime_profile() -> None:
+    text = _workflow_text()
+    expected_sources = [
+        "CD-generated deploy marker files can appear",
+        "k8s/awoooi-prod/06-deployment-api.yaml)",
+        "k8s/awoooi-prod/kustomization.yaml)",
+    ]
+    for source in expected_sources:
+        assert source in text
+
+
 def test_reboot_auto_recovery_slo_sources_stay_on_controlled_runtime_profile() -> None:
     text = _workflow_text()
     expected_sources = [