- **Change:** FalconImageAnalyzer CR does **not** support `podAnnotations`. The safe-to-evict annotation needs to be applied to the `falcon-iar` Deployment. - **Reason:** IAR pods use local storage (e.g. `/tmp` for scanning); eviction is safe for scale-down. Unblocks scale-down of nodes that only have falcon-iar.