how are people handling deploying apps to k8s? do the pulumi code for the app live in the apps repo (as a separate stack) ? and then CI uses this to deploy to k8s, handling e.g. different branches etc.

I’d recommend separate stacks for production setups, but I mix infra and apps a lot for testing and dev scenarios because it’s simpler to set up.