deploy DHARMA registry to neuron-prod

- Dockerfile for Go DHARMA server (registry.neuralplatform.ai/neuron-technologies/dharma)
- k8s manifests: deployment, service, ExternalSecret (Vault), IngressRoute
- Argo CD app: deploys to neuron-prod namespace
- Cloudflare tunnel rule for dharma.neurontechnologies.ai
- DNS CNAME record for dharma.neurontechnologies.ai → legion tunnel
- Vault secrets already populated (api_key, encryption_key, jwt_secret, engram_key, engram_url)
- Connects to neuron-daemon (engram) at neuron-daemon.neuron-prod.svc.cluster.local:7749

servers/legion/k8s/neuron-technologies/dharma/externalsecret.yaml

@@ -0,0 +1,43 @@
+# Populate Vault before first deploy:
+#
+#   vault kv put secret/neuron-technologies/dharma \
+#     api_key="..." \
+#     encryption_key="..." \
+#     jwt_secret="..." \
+#     engram_key="..." \
+#     engram_url="http://neuron-daemon.neuron-prod.svc.cluster.local:7749"
+
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: dharma-secrets
+  namespace: neuron-prod
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: dharma-secrets
+    creationPolicy: Owner
+  data:
+    - secretKey: DHARMA_API_KEY
+      remoteRef:
+        key: secret/data/neuron-technologies/dharma
+        property: api_key
+    - secretKey: DHARMA_ENCRYPTION_KEY
+      remoteRef:
+        key: secret/data/neuron-technologies/dharma
+        property: encryption_key
+    - secretKey: DHARMA_JWT_SECRET
+      remoteRef:
+        key: secret/data/neuron-technologies/dharma
+        property: jwt_secret
+    - secretKey: ENGRAM_KEY
+      remoteRef:
+        key: secret/data/neuron-technologies/dharma
+        property: engram_key
+    - secretKey: ENGRAM_URL
+      remoteRef:
+        key: secret/data/neuron-technologies/dharma
+        property: engram_url