Remove unused webhook server listening on port 9443

[ChrisJBurns]

Summary

The operator manager starts a TLS webhook server on port 9443 with zero registered handlers. No webhook handlers are registered anywhere in the codebase, making this a wasted resource.

Severity: MUST FIX
Area: Webhooks
Breaking: No

Location

• cmd/thv-operator/main.go:81

Problem

WebhookServer: webhook.NewServer(webhook.Options{Port: 9443}),

The manager starts a TLS listener on port 9443 with zero registered handlers. No webhook handlers are registered anywhere in the codebase.

Impact

• Wasted port and goroutines
• Potential confusion if port conflicts arise
• The Helm chart doesn't expose port 9443, so the listener is unreachable

Recommended Fix

Remove the WebhookServer line from manager options until webhooks are actually implemented. Optionally, make it conditional on a feature flag.