feat(neuron): gamma zone, all-slot ingress, snapshot job, self-improvement loop script

servers/legion/main.tf

@@ -52,7 +52,7 @@ resource "cloudflare_zero_trust_tunnel_cloudflared_config" "legion" {
   tunnel_id  = var.cloudflare_tunnel_id
 
   config {
-    # neuron.neuralplatform.ai — MCP server (SSE transport, requires CF-Access headers)
+    # neuron.neuralplatform.ai — MCP server, stable prod
     ingress_rule {
       hostname = "neuron.neuralplatform.ai"
       service  = "https://traefik.kube-system.svc:443"
@@ -61,6 +61,33 @@ resource "cloudflare_zero_trust_tunnel_cloudflared_config" "legion" {
       }
     }
 
+    # neuron-alpha.neuralplatform.ai — experiment zone 1 (CI auto-deploys here)
+    ingress_rule {
+      hostname = "neuron-alpha.neuralplatform.ai"
+      service  = "https://traefik.kube-system.svc:443"
+      origin_request {
+        no_tls_verify = true
+      }
+    }
+
+    # neuron-beta.neuralplatform.ai — experiment zone 2
+    ingress_rule {
+      hostname = "neuron-beta.neuralplatform.ai"
+      service  = "https://traefik.kube-system.svc:443"
+      origin_request {
+        no_tls_verify = true
+      }
+    }
+
+    # neuron-gamma.neuralplatform.ai — experiment zone 3
+    ingress_rule {
+      hostname = "neuron-gamma.neuralplatform.ai"
+      service  = "https://traefik.kube-system.svc:443"
+      origin_request {
+        no_tls_verify = true
+      }
+    }
+
     ingress_rule {
       hostname = "vault.neuralplatform.ai"
       service  = "https://traefik.kube-system.svc:443"