[DerekRoberts]

The README lost its by-hand setup instructions (service account, role binding, OC_TOKEN, OC_NAMESPACE, DB_PASSWORD) in #2887, leaving only the setup scripts.

• Restores the removed Secret Values content from before feat(scripts): setup scripts for GitHub and OpenShift #2887, close to verbatim, as Secrets and Variables by Hand: repository-level vs environment values, where to create secrets and environments, the OC_TOKEN steps (oc create sa, oc create rolebinding, oc create token --duration=87600h), OC_NAMESPACE and DB_PASSWORD guidance.
• Updates only what has changed since: OC_NAMESPACE is now a variable (vars.OC_NAMESPACE), plus gh secret set / gh variable set commands and OC_SERVER.
• Marks the setup scripts (checklist steps 5 and 6) as an optional helper, linking to the by-hand steps.

[Copilot]

🟡 Changes recommended

The token-transfer command needs a readiness check to avoid uploading empty input before OpenShift populates the token.

1 open issue

• Avoid uploading an empty token before the OpenShift secret is ready · New

What changed in this PR

Restores manual OpenShift deployment-account setup alongside the existing setup scripts.

Changes:

• Documents service-account creation, permissions, and token setup using script-compatible names.
• Explains GitHub secret and variable configuration for DEV, TEST, and PROD.
• Clarifies that pull requests deploy to <plate>-dev.

File	Description
README.md	Adds manual deployment-account and environment configuration instructions.

_{Review effort: Balanced}