Pin helm handoff and Makefile defaults to the f2e042a image after build, push, CNPG migration, and helm upgrade. Cluster is primary again via state-hub-primary tunnel.
f2e042a