fix(contrib): address review feedback for Kyverno MCP server

- Switch probes from /sse (SSE long-lived connection) to tcpSocket
  to avoid hanging probe connections
- Use ghcr.io/kagent-dev/kyverno-mcp-server:latest with comment
  showing how to use a local image instead
- Set protocol: SSE explicitly in RemoteMCPServer spec

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: optimus-fulcria

contrib/tools/kyverno-mcp-server/deploy-kyverno-mcp-server.yaml

@@ -68,8 +68,11 @@ spec:
       serviceAccountName: kyverno-mcp-server
       containers:
         - name: kyverno-mcp-server
-          image: kyverno-mcp-server:latest
+          image: ghcr.io/kagent-dev/kyverno-mcp-server:latest
           imagePullPolicy: IfNotPresent
+          # To use a locally built image instead, set:
+          #   image: kyverno-mcp-server:latest
+          #   imagePullPolicy: Never
           ports:
             - name: mcp
               containerPort: 8089
@@ -86,14 +89,12 @@ spec:
               cpu: 500m
               memory: 256Mi
           readinessProbe:
-            httpGet:
-              path: /sse
+            tcpSocket:
               port: 8089
             initialDelaySeconds: 5
             periodSeconds: 10
           livenessProbe:
-            httpGet:
-              path: /sse
+            tcpSocket:
               port: 8089
             initialDelaySeconds: 10
             periodSeconds: 30

contrib/tools/kyverno-mcp-server/kyverno-remote-mcpserver.yaml

@@ -4,6 +4,7 @@ metadata:
   name: kyverno-mcp-server
   namespace: kagent
 spec:
+  protocol: SSE
   url: "http://kyverno-mcp-server:8089/sse"
   timeout: 30s
   sseReadTimeout: 5m0s