2092f9330c
kubelet materializes /home/runner/.cache as root when creating the omp-bazel-repo subPath mountpoint, so bazel's default output_user_root under it fails with EACCES. Kata jobs now point output_user_root at RUNNER_TEMP via the bazel-cache rc fragment (pods are single-job ephemeral; toolchain/crate downloads stay on the PVC repository cache), and the runner image pre-owns ~/.cache for the next rebake.