fix TF drift: add DOCUSEAL_WEBHOOK_TOKEN and TOGETHER_API_KEY env vars

DOCUSEAL_WEBHOOK_TOKEN was present on all live marketing services but
missing from cloud-run.tf and cloud-run-stage.tf — next apply would
have stripped it and broken DocuSeal webhook validation.

TOGETHER_API_KEY (soma-together-api-key) was present on soma-prod-us
but missing from cloud-run-soma.tf — next apply would have broken the
Together.ai inference routing path.

servers/gcp/cloud-run.tf

@@ -158,6 +158,15 @@ resource "google_cloud_run_v2_service" "prod_us" {
           }
         }
       }
+      env {
+        name = "DOCUSEAL_WEBHOOK_TOKEN"
+        value_source {
+          secret_key_ref {
+            secret  = "docuseal-webhook-token"
+            version = "latest"
+          }
+        }
+      }
 
       ports {
         container_port = 8080
@@ -341,6 +350,15 @@ resource "google_cloud_run_v2_service" "prod_eu" {
           }
         }
       }
+      env {
+        name = "DOCUSEAL_WEBHOOK_TOKEN"
+        value_source {
+          secret_key_ref {
+            secret  = "docuseal-webhook-token"
+            version = "latest"
+          }
+        }
+      }
 
       ports {
         container_port = 8080
@@ -524,6 +542,15 @@ resource "google_cloud_run_v2_service" "prod_apac" {
           }
         }
       }
+      env {
+        name = "DOCUSEAL_WEBHOOK_TOKEN"
+        value_source {
+          secret_key_ref {
+            secret  = "docuseal-webhook-token"
+            version = "latest"
+          }
+        }
+      }
 
       ports {
         container_port = 8080