gitea: place Veles ACL one-off on rpi5

services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml

@@ -1,10 +1,10 @@
 # services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
-# One-off job for gitea/veles-feedback-acl-ensure-1.
+# One-off job for gitea/veles-feedback-acl-ensure-2.
 # Purpose: keep Veles testers on the feedback repo without granting source access.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: veles-feedback-acl-ensure-1
+  name: veles-feedback-acl-ensure-2
   namespace: gitea
 spec:
   suspend: false
@@ -36,6 +36,9 @@ spec:
                   - key: kubernetes.io/arch
                     operator: In
                     values: ["arm64"]
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
                   - key: node-role.kubernetes.io/worker
                     operator: Exists
       containers: