feat(swarm): add swarm self-improvement loop infrastructure

Adds complete k8s manifests, ArgoCD app, and Terraform namespace
resources for the Neuron swarm self-improvement loop system.

Each variant (alpha, beta, gamma) gets its own isolated namespace,
PVC, MCP/REST deployments, ExternalSecrets from Vault, RBAC for CI,
and a SQLite clone Job template for session startup.

servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml

@@ -0,0 +1,99 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: neuron-rest
+  namespace: swarm-alpha
+  labels:
+    app: neuron-rest
+    env: swarm
+    variant: alpha
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: neuron-rest
+  template:
+    metadata:
+      labels:
+        app: neuron-rest
+        env: swarm
+        variant: alpha
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: neuron-rest
+          image: registry.neuralplatform.ai/neuron-technologies/neuron-rest:v0.15.3
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8081
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: false
+            runAsNonRoot: true
+            capabilities:
+              drop: ["ALL"]
+          env:
+            - name: NEURON_SWARM_VARIANT
+              value: "alpha"
+            - name: NEURON_SWARM_SESSION
+              valueFrom:
+                configMapKeyRef:
+                  name: swarm-alpha-session
+                  key: session_id
+                  optional: true
+            - name: NEURON_SWARM_GOAL
+              valueFrom:
+                configMapKeyRef:
+                  name: swarm-alpha-session
+                  key: goal
+                  optional: true
+            - name: NEURON_SWARM_LOOP_MAX
+              valueFrom:
+                configMapKeyRef:
+                  name: swarm-alpha-session
+                  key: loop_max
+                  optional: true
+          envFrom:
+            - configMapRef:
+                name: swarm-alpha-config
+            - secretRef:
+                name: swarm-alpha-secrets
+          volumeMounts:
+            - name: data
+              mountPath: /data
+          resources:
+            requests:
+              cpu: 250m
+              memory: 512Mi
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+          startupProbe:
+            httpGet:
+              path: /actuator/health/liveness
+              port: http
+            failureThreshold: 30
+            periodSeconds: 5
+          livenessProbe:
+            httpGet:
+              path: /actuator/health/liveness
+              port: http
+            periodSeconds: 30
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /actuator/health/readiness
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            failureThreshold: 3
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: swarm-alpha-data