feat: add Go workload deployment artifacts and split Ingress routing

deploy/ack/ingress.yaml

@@ -12,7 +12,7 @@ spec:
       http:
         paths:
           # Longest-prefix matching sends public internal-API traffic to the
-          # selectorless deny Service instead of the Web workload.
+          # selectorless deny Service instead of any workload.
           - path: /api/internal/worker
             pathType: Prefix
             backend:
@@ -20,6 +20,30 @@ spec:
                 name: zhinian-public-deny
                 port:
                   number: 80
+          # Backend paths belong to the Go API workload from the first
+          # production deployment.
+          - path: /api
+            pathType: Prefix
+            backend:
+              service:
+                name: zhinian-go-api
+                port:
+                  number: 8080
+          - path: /uploads
+            pathType: Prefix
+            backend:
+              service:
+                name: zhinian-go-api
+                port:
+                  number: 8080
+          - path: /generated-results
+            pathType: Prefix
+            backend:
+              service:
+                name: zhinian-go-api
+                port:
+                  number: 8080
+          # Pages and static assets stay with Next.js.
           - path: /
             pathType: Prefix
             backend: