fix(multiplayer): authenticate Agones Kubernetes API

deploy/k8s/base/allocator-deployment.yaml

@@ -24,7 +24,9 @@ spec:
     spec:
       terminationGracePeriodSeconds: 10
       serviceAccountName: allocator
-      automountServiceAccountToken: false
+      # This role calls Agones CRDs through the Kubernetes API. The client
+      # rereads the short-lived projected token on every request.
+      automountServiceAccountToken: true
       topologySpreadConstraints:
         - maxSkew: 1
           topologyKey: topology.kubernetes.io/zone
@@ -52,8 +54,9 @@ spec:
           image: ghcr.io/cosmic-clash/allocator@sha256:0000000000000000000000000000000000000000000000000000000000000000
           args:
             - --dsn=$(COSMIC_CLASH_POSTGRES_DSN)
-            - --agones-url=https://agones-allocator.agones-system.svc.cluster.local
+            - --agones-url=https://kubernetes.default.svc
             - --agones-namespace=cosmic-clash
+            - --provider-timeout=10s
             - --metrics-addr=:9091
           ports:
             - name: metrics