prepare neuron-tim namespace for Tim's future Neuron instance

Adds the neuron-tim namespace (via Terraform) and a full Argo CD
app + k8s manifests mirroring neuron-prod. All deployments set to
replicas=0 — nothing runs until Tim's imprint is ready and Vault
secrets are populated at secret/neuron-technologies/tim.

servers/legion/k8s/neuron-technologies/tim/ingress.yaml

@@ -0,0 +1,37 @@
+# TODO: Confirm subdomain for Tim's Neuron instance.
+# Placeholder: tim.neurontechnologies.ai
+# Alternatives to consider: neuron-tim.neuralplatform.ai
+# Once confirmed, add a DNS CNAME record in dns-neurontechnologies.tf (or dns-neuralplatform.tf)
+# pointing to ${var.cloudflare_tunnel_id}.cfargotunnel.com.
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: neuron-tim
+  namespace: neuron-tim
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: traefik
+  tls:
+    - secretName: neuron-tim-tls
+      hosts:
+        - tim.neurontechnologies.ai
+  rules:
+    - host: tim.neurontechnologies.ai
+      http:
+        paths:
+          - path: /mcp
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-rest
+                port:
+                  number: 8081