launch: deploy daemon StatefulSet, fix neuron-rest security context, add daemon Argo CD app

- Add neuron-daemon Argo CD Application (apps/neuron-daemon.yaml) pointing to
  k8s/neuron-technologies/daemon/ on main — daemon will deploy once image is built
- Add daemon k8s manifests: StatefulSet (2 replicas, imagePullPolicy: Always),
  Service (ClusterIP :7749, session affinity), ExternalSecret (Anthropic API key from Vault)
- Fix neuron-rest runAsNonRoot: remove constraint since v0.15.3 image runs as root,
  clears the CreateContainerConfigError on the 11h-old stale pod
- Add NEURON_DAEMON_WS_URL env var to marketing deployment for chat UI connectivity
- Add neuron.neurontechnologies.ai Cloudflare DNS record and tunnel ingress rule (Terraform)

servers/legion/k8s/neuron-technologies/marketing/deployment.yaml

@@ -40,6 +40,8 @@ spec:
               value: production
             - name: NEURON_LICENSE_API_URL
               value: http://neuron-license.neuron-prod.svc.cluster.local:8082
+            - name: NEURON_DAEMON_WS_URL
+              value: ws://neuron-daemon.neuron-prod.svc.cluster.local:7749/ws
           envFrom:
             - secretRef:
                 name: neuron-marketing-secrets