feat: extract soul-demo into standalone Cloud Run service

.gitea/workflows/stage.yaml

@@ -12,6 +12,7 @@ on:
       - 'dist/**'
       - 'runtime/**'
       - 'Dockerfile.stage'
+      - 'Dockerfile.soul-demo'
       - 'build-stage.sh'
       - '.gitea/workflows/stage.yaml'
 
@@ -230,6 +231,49 @@ jobs:
              -lcurl -lpthread -ldl -lm -lssl -lcrypto
           echo "soul-demo compiled: $(ls -lh dist/soul-demo)"
 
+      - name: Build and push soul-demo image
+        if: steps.changetype.outputs.asset_only != 'true'
+        id: soul-image
+        run: |
+          set -euo pipefail
+          SOUL_IMAGE="us-central1-docker.pkg.dev/neuron-785695/neuron-marketing/soul-demo:${{ steps.tag.outputs.tag }}"
+          docker build --no-cache \
+            -f Dockerfile.soul-demo \
+            -t "soul-demo:${{ steps.tag.outputs.tag }}" \
+            .
+          docker tag "soul-demo:${{ steps.tag.outputs.tag }}" "$SOUL_IMAGE"
+          docker tag "soul-demo:${{ steps.tag.outputs.tag }}" \
+            "us-central1-docker.pkg.dev/neuron-785695/neuron-marketing/soul-demo:stage-latest"
+          docker push "$SOUL_IMAGE"
+          docker push "us-central1-docker.pkg.dev/neuron-785695/neuron-marketing/soul-demo:stage-latest"
+          echo "soul_image=${SOUL_IMAGE}" >> "$GITHUB_OUTPUT"
+          echo "Soul-demo image: ${SOUL_IMAGE}"
+
+      - name: Deploy soul-demo-stage
+        if: steps.changetype.outputs.asset_only != 'true'
+        id: deploy-soul
+        run: |
+          set -euo pipefail
+          gcloud run deploy soul-demo-stage \
+            --image "${{ steps.soul-image.outputs.soul_image }}" \
+            --region us-central1 \
+            --project neuron-785695 \
+            --service-account neuron-marketing-sa@neuron-785695.iam.gserviceaccount.com \
+            --update-env-vars "NEURON_LLM_0_FORMAT=anthropic,NEURON_LLM_0_MODEL=claude-sonnet-4-5,NEURON_LLM_0_URL=https://api.anthropic.com/v1/messages" \
+            --update-secrets "NEURON_LLM_0_KEY=anthropic-api-key:latest,ANTHROPIC_API_KEY=anthropic-api-key:latest" \
+            --min-instances 1 \
+            --max-instances 10 \
+            --concurrency 20 \
+            --port 8080 \
+            --allow-unauthenticated \
+            --quiet
+
+          SOUL_URL=$(gcloud run services describe soul-demo-stage \
+            --region us-central1 --project neuron-785695 \
+            --format 'value(status.url)')
+          echo "soul_url=${SOUL_URL}" >> "$GITHUB_OUTPUT"
+          echo "Soul-demo URL: ${SOUL_URL}"
+
       - name: Build and tag image
         if: steps.changetype.outputs.asset_only != 'true'
         run: |
@@ -275,6 +319,21 @@ jobs:
           docker push "${LATEST%:*}:stage-latest"
           echo "Fast asset build complete"
 
+      - name: Resolve soul-demo URL
+        id: soul-url
+        run: |
+          set -euo pipefail
+          # For full builds: soul_url comes from deploy-soul step output.
+          # For asset-only builds (soul-demo not redeployed): describe existing service.
+          SOUL_URL="${{ steps.deploy-soul.outputs.soul_url }}"
+          if [ -z "$SOUL_URL" ]; then
+            SOUL_URL=$(gcloud run services describe soul-demo-stage \
+              --region us-central1 --project neuron-785695 \
+              --format 'value(status.url)' 2>/dev/null || echo "")
+          fi
+          echo "soul_url=${SOUL_URL}" >> "$GITHUB_OUTPUT"
+          echo "Resolved SOUL_URL: ${SOUL_URL}"
+
       - name: Deploy to marketing-stage
         id: deploy-stage
         env:
@@ -287,7 +346,7 @@ jobs:
             --region us-central1 \
             --project neuron-785695 \
             --service-account neuron-marketing-sa@neuron-785695.iam.gserviceaccount.com \
-            --update-env-vars "NODE_ENV=production,STRIPE_PUBLISHABLE_KEY=pk_test_51TPoHnJg9Fv1D3AUp1FEMcy4MGlKRZqs4scW66kjQFQjWofmNc2rottzXzDaXekHvuw1OQpyp2WCIsc7O5fXIG0G00HQQrkdGX,GCS_SHARE_BUCKET=neuron-shares-prod,SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im9jb2pzZ2hhb25sdHVuaWRrenB3Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3Nzc2NDIxNjgsImV4cCI6MjA5MzIxODE2OH0.e0FVFw1aahnrBVvnkR5R8a-RxCx095U8o_gsk7Quq3E,NEURON_LLM_0_FORMAT=anthropic,NEURON_LLM_0_MODEL=claude-sonnet-4-5,NEURON_LLM_0_URL=https://api.anthropic.com/v1/messages" \
+            --update-env-vars "NODE_ENV=production,STRIPE_PUBLISHABLE_KEY=pk_test_51TPoHnJg9Fv1D3AUp1FEMcy4MGlKRZqs4scW66kjQFQjWofmNc2rottzXzDaXekHvuw1OQpyp2WCIsc7O5fXIG0G00HQQrkdGX,GCS_SHARE_BUCKET=neuron-shares-prod,SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im9jb2pzZ2hhb25sdHVuaWRrenB3Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3Nzc2NDIxNjgsImV4cCI6MjA5MzIxODE2OH0.e0FVFw1aahnrBVvnkR5R8a-RxCx095U8o_gsk7Quq3E,NEURON_LLM_0_FORMAT=anthropic,NEURON_LLM_0_MODEL=claude-sonnet-4-5,NEURON_LLM_0_URL=https://api.anthropic.com/v1/messages,SOUL_URL=${{ steps.soul-url.outputs.soul_url }}" \
             --update-secrets "SUPABASE_SERVICE_KEY=supabase-service-key:latest,NEURON_LLM_0_KEY=anthropic-api-key:latest,ANTHROPIC_API_KEY=anthropic-api-key:latest,STRIPE_SECRET_KEY=stripe-secret-key-stage:latest,STRIPE_WEBHOOK_SECRET=stripe-webhook-secret-stage:latest,STRIPE_PRICE_PROFESSIONAL=stripe-price-professional-stage:latest,STRIPE_PRICE_FOUNDING=stripe-price-founding-stage:latest,STRIPE_PRICE_FAMILY_CHILD=stripe-price-family-child:latest,RESEND_API_KEY=resend-api-key:latest,DOCUSEAL_WEBHOOK_TOKEN=docuseal-webhook-token:latest" \
             --allow-unauthenticated \
             --quiet