Use temporal.coulomb.social for Temporal UI SSO host

Prefer clean short hostname temporal.coulomb.social instead of
activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.

k8s/railiance/10-infrastructure.yaml

@@ -385,4 +385,4 @@ spec:
               value: actcore-temporal:7233
             - name: TEMPORAL_CORS_ORIGINS
               # Include SSO host (ACTIVITY-WP-0025) and local port-forward.
-              value: https://activity-temporal.coulomb.social,http://localhost:8080,http://127.0.0.1:8080
+              value: https://temporal.coulomb.social,http://localhost:8080,http://127.0.0.1:8080

k8s/railiance/32-ingress-temporal-sso.yaml

@@ -1,5 +1,5 @@
 # HTTPS SSO front door for Temporal Web UI.
-# Requires DNS: activity-temporal.coulomb.social A → 92.205.62.239
+# Requires DNS: temporal.coulomb.social A → 92.205.62.239
 # ACTIVITY-WP-0025
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -19,10 +19,10 @@ spec:
   ingressClassName: traefik
   tls:
     - hosts:
-        - activity-temporal.coulomb.social
+        - temporal.coulomb.social
       secretName: actcore-temporal-ui-tls
   rules:
-    - host: activity-temporal.coulomb.social
+    - host: temporal.coulomb.social
       http:
         paths:
           - path: /

k8s/railiance/README.md

@@ -118,17 +118,17 @@ kubectl -n activity-core get svc
 ```bash
 # DNS A records → 92.205.62.239 (once):
 #   activity.coulomb.social
-#   activity-temporal.coulomb.social
+#   temporal.coulomb.social
 
 kubectl apply -f k8s/railiance/30-authelia-middleware.yaml
 kubectl apply -f k8s/railiance/31-ingress-ops-sso.yaml
 kubectl apply -f k8s/railiance/32-ingress-temporal-sso.yaml
 kubectl -n activity-core set env deploy/actcore-api \
-  ACTIVITY_CORE_TEMPORAL_UI_URL=https://activity-temporal.coulomb.social
+  ACTIVITY_CORE_TEMPORAL_UI_URL=https://temporal.coulomb.social
 ```
 
 - Ops: https://activity.coulomb.social/ops/ui (Authelia SSO)
-- Temporal: https://activity-temporal.coulomb.social
+- Temporal: https://temporal.coulomb.social
 - Design: `docs/ops-sso-access.md`
 
 ### Break-glass port-forward