k8s-csr-approved-denied-immutable

Status: IN

CSR `Approved` and `Denied` conditions are mutually exclusive and cannot be removed once added.

Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_apis-certificate.md