Add an explicit ArgoCD sync and health-poll script

.github/workflows/sync-argocd-app.yml

@@ -0,0 +1,25 @@
+name: Sync ArgoCD Application and report health
+
+# Yesterday's session left the live medical-chatbot-app Application with
+# secret.jwtSecret + authService/apiGateway enabled set inline (via manual
+# ArgoCD UI edits) but no explicit sync afterward -- health is Synced/
+# Degraded with a stuck ai-service/web rollout using the chart's default
+# (nonexistent) image. This forces one explicit sync (same action as the
+# UI's SYNC button) and polls health afterward so we see the real result
+# instead of guessing.
+
+on:
+  workflow_dispatch: {}
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - name: Sync and report
+        env:
+          ARGOCD_PRACTICE_URL: ${{ secrets.ARGOCD_PRACTICE_URL }}
+          ARGOCD_PRACTICE_PASSWORD: ${{ secrets.ARGOCD_PRACTICE_PASSWORD }}
+        run: python3 .github/scripts/sync_and_report_argocd_app.py