Add neuron prod DB backup and tighten actuator surface
- Add hourly restic backup CronJob to neuron-prod namespace
- Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
- Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
- ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
- prod: health,info only / show-details=never (no internals exposed)
- stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
- dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
Will Anderson
5085840a79