WP-0011: deploy scaffolding for revenue.coulomb.social

Record T01 package (in-repo k8s/railiance, combined /ui + API app,
dedicated CNPG). Add Dockerfile, healthz, migration/bootstrap scripts,
kustomize manifests, ArgoCD Application (in railiance-platform), and
docs/deployment.md. T05 left open for operator DNS/OpenBao/image push.

k8s/railiance/ingress.yaml

@@ -0,0 +1,30 @@
+# Public surface: revenue.coulomb.social (WP-0011).
+# Trust Service API at / ; Control Plane UI at /ui/ (combined ASGI app).
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: target-revenue
+  namespace: target-revenue
+  labels:
+    app.kubernetes.io/name: target-revenue
+    app.kubernetes.io/part-of: target-revenue
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    argocd.argoproj.io/sync-wave: "4"
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: revenue.coulomb.social
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: target-revenue
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - revenue.coulomb.social
+      secretName: target-revenue-tls