add identity check in Reconcile as fallback for library-import callers

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: carlydf

internal/controller/worker_controller.go

@@ -133,6 +133,14 @@ func (r *TemporalWorkerDeploymentReconciler) Reconcile(ctx context.Context, req
 	defer cancel()
 
 	l := log.FromContext(ctx)
+
+	// Fallback identity check for when the reconciler is used as a library and
+	// main() is not in the call path. main() is kept as the primary check for
+	// faster feedback in normal Helm-based deployments.
+	if getControllerIdentity() == "" {
+		return ctrl.Result{}, fmt.Errorf("CONTROLLER_IDENTITY environment variable is not set")
+	}
+
 	l.V(1).Info("Running Reconcile loop")
 
 	// Fetch the worker deployment