Merge pull request 'Wire marketplace Postgres datasource for neuron-mcp' (#18) from feat/marketplace-postgres-infra into main

servers/legion/k8s/neuron-technologies/prod/configmap.yaml

@@ -7,8 +7,9 @@ data:
   SPRING_PROFILES_ACTIVE: "prod"
   NEURON_DATA_DIR: "/data"
   NEURON_DB_PATH: "/data/neuron.db"
-  NEURON_MARKETPLACE_DB_PATH: "/data/neuron-marketplace.db"
   NEURON_STORAGE_PATH: "/data"
+  MARKETPLACE_DB_URL: "jdbc:postgresql://postgres-postgresql.platform.svc.cluster.local:5432/neuron_marketplace"
+  MARKETPLACE_DB_USER: "postgres"
   SERVER_TOMCAT_ACCESSLOG_ENABLED: "true"
   # Prod: minimal surface — never expose internals
   MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE: "health,info"

servers/legion/k8s/neuron-technologies/prod/externalsecret.yaml

@@ -56,3 +56,7 @@ spec:
       remoteRef:
         key: secret/data/neuron-technologies/marketing
         property: stripe_marketplace_webhook_secret
+    - secretKey: MARKETPLACE_DB_PASSWORD
+      remoteRef:
+        key: secret/data/legion-db
+        property: postgres_password

servers/legion/k8s/neuron-technologies/prod/mcp-deployment.yaml

@@ -22,7 +22,7 @@ spec:
         slot: blue
         env: prod
       annotations:
-        config-hash: "marketplace-db-subpath-v3"
+        config-hash: "marketplace-postgres-v1"
     spec:
       terminationGracePeriodSeconds: 30
       securityContext:
@@ -30,16 +30,6 @@ spec:
         runAsUser: 1000
         seccompProfile:
           type: RuntimeDefault
-      initContainers:
-        - name: fix-data-ownership
-          image: busybox:1.36
-          command: ["sh", "-c", "touch /data/neuron-marketplace.db && chown -R 1000:1000 /data"]
-          securityContext:
-            runAsUser: 0
-            runAsNonRoot: false
-          volumeMounts:
-            - name: data
-              mountPath: /data
       containers:
         - name: neuron-mcp
           image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.15.3
@@ -67,9 +57,6 @@ spec:
           volumeMounts:
             - name: data
               mountPath: /data
-            - name: data
-              mountPath: /app/neuron-marketplace.db
-              subPath: neuron-marketplace.db
           resources:
             requests:
               cpu: 250m