Rancher's control plane for downstream clusters — provisioning with RKE2 and K3s, centralized auth and policy, Fleet GitOps, and where SUSE's stack fits.