feat(neuron-prod): add IngressRoute for license API at /api/v1/* paths

servers/legion/k8s/neuron-technologies/prod/kustomization.yaml

@@ -9,4 +9,5 @@ resources:
   - license-deployment.yaml
   - services.yaml
   - ingress.yaml
+  - license-ingressroute.yaml
   - backup-cronjob.yaml

servers/legion/k8s/neuron-technologies/prod/license-ingressroute.yaml

@@ -0,0 +1,21 @@
+# Traefik IngressRoute: route /api/v1/licenses/* and /api/v1/keys/* at
+# neurontechnologies.ai to the neuron-license service.
+#
+# The marketing site webhook calls: POST ${NEURON_LICENSE_API_URL}/api/v1/licenses/provision
+# Set NEURON_LICENSE_API_URL = https://neurontechnologies.ai in GCP Cloud Run.
+# (The Legion k8s deployment uses the cluster-internal URL directly.)
+
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: neuron-license-api
+  namespace: neuron-prod
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`neurontechnologies.ai`) && (PathPrefix(`/api/v1/licenses`) || PathPrefix(`/api/v1/keys`) || PathPrefix(`/api/v1/organizations`))
+      kind: Rule
+      services:
+        - name: neuron-license
+          port: 8082