feat: add Go workload deployment artifacts and split Ingress routing

deploy/ack/configmap.yaml

@@ -16,3 +16,31 @@ data:
   DATABASE_IDLE_TIMEOUT_MS: "30000"
   DATABASE_STATEMENT_TIMEOUT_MS: "30000"
   DATABASE_APPLICATION_NAME: zhinian-web
+---
+# Go API runtime settings. Provider endpoints/models use code defaults unless
+# overridden here; credentials always come from zhinian-go-providers.
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: zhinian-go-runtime
+  namespace: zhinian
+data:
+  NODE_ENV: production
+  GO_BACKEND_PORT: "8080"
+  ZHINIAN_DATA_BACKEND: postgres
+  ZHINIAN_AUTH_REQUIRED: "true"
+  ZHINIAN_AUTH_COOKIE_SECURE: "true"
+  ZHINIAN_PUBLIC_BASE_URL: https://REPLACE_WITH_PUBLIC_HOST
+  DATABASE_SSL_MODE: verify-full
+  DATABASE_CA_CERT_PATH: /etc/zhinian/rds/ca.pem
+  DATABASE_POOL_MAX: "10"
+  DATABASE_CONNECTION_TIMEOUT_MS: "5000"
+  DATABASE_IDLE_TIMEOUT_MS: "30000"
+  DATABASE_STATEMENT_TIMEOUT_MS: "30000"
+  DATABASE_APPLICATION_NAME: zhinian-go-api
+  ZHINIAN_GO_EMBEDDED_WORKER: "true"
+  ZHINIAN_WORKER_ID: zhinian-go-api-embedded
+  ZHINIAN_BILLING_REQUIRED: "1"
+  ZHINIAN_RUNTIME_DIR: /var/lib/zhinian/runtime
+  ZHINIAN_LOG_DIR: /var/lib/zhinian/logs
+  ZHINIAN_SETTINGS_FILE: /var/lib/zhinian/settings.env