Document not to converge with a reduced runlist

AGENTS.md

@@ -33,6 +33,7 @@ We use **Chef Infra**, managed locally via **Knife Zero** (agentless Chef), and
    - *Example for a VM host/proxy (different port):* `knife zero converge -p2222 name:fornax`
    - *Example for all machines matching a role:* `knife zero converge -p2222 -a knife_zero.host 'role:openresty_proxy'`
    - To migrate an existing (Chef) node to Cinc Client: `scripts/knife/migrate_node_to_cinc.sh <node>`, then converge as usual.
+   - Never converge with a reduced runlist, as it will likely impact firewall rules for other services on the same machine
 
 3. **Code Style & Conventions**
    - Chef recipes, resources, and roles are written in **Ruby**.