Deploy soma to GCP Cloud Run at ai.neurontechnologies.ai

- Add cloud-run-soma.tf: soma-prod-us Cloud Run service in us-central1,
  neuron-soma-sa service account, soma Artifact Registry repo, Secret
  Manager secrets for HF token and operator key, serverless NEG, backend
  service, SSL cert
- Add dns-gcp.tf: Cloudflare A record for ai.neurontechnologies.ai pointing
  to GCP LB IP; Cloudflare provider added to main.tf/variables.tf
- Update load-balancer.tf: soma host rule + path matcher, soma SSL cert
  added to HTTPS proxy
- Update outputs.tf: soma service URL and artifact registry URL outputs
- Remove legion soma k8s manifests (Legion is gone)
- Update AGENTS.md to reflect GCP as primary production environment

servers/gcp/outputs.tf

@@ -70,6 +70,7 @@ output "cloud_run_services" {
     api_us         = google_cloud_run_v2_service.api_us.uri
     api_eu         = google_cloud_run_v2_service.api_eu.uri
     api_apac       = google_cloud_run_v2_service.api_apac.uri
+    soma_us        = google_cloud_run_v2_service.soma_us.uri
   }
 }
 
@@ -79,5 +80,21 @@ output "artifact_registry_urls" {
     marketing = "us-central1-docker.pkg.dev/${var.project_id}/neuron-marketing/marketing"
     accounts  = "us-central1-docker.pkg.dev/${var.project_id}/neuron-accounts/accounts"
     api       = "us-central1-docker.pkg.dev/${var.project_id}/neuron-api/api"
+    soma      = "us-central1-docker.pkg.dev/${var.project_id}/neuron-soma/soma"
   }
 }
+
+output "soma_service_url" {
+  description = "Soma Cloud Run service URL (us-central1)"
+  value       = google_cloud_run_v2_service.soma_us.uri
+}
+
+output "soma_artifact_registry_url" {
+  description = "Soma Docker image base URL in Artifact Registry"
+  value       = "us-central1-docker.pkg.dev/${var.project_id}/neuron-soma/soma"
+}
+
+output "soma_ssl_cert_name" {
+  description = "Soma SSL cert (check provisioning status in GCP console)"
+  value       = google_compute_managed_ssl_certificate.soma.name
+}