Initial segregate: proxy source, deploy manifests, ImagePolicy Flux CRs.

Move workload out of infra with cursor-devbox-style GitRepository +
run_number-sha image automation.

entrypoint.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+# Container entrypoint: run cursor-agent bootstrap, then start the proxy.
+set -euo pipefail
+
+# Seed ~/.cursor/cli-config.json (default global permissions) and verify
+# the cursor-agent binary responds.
+/app/scripts/bootstrap-cursor.sh
+
+# The HTTP server. Sessions spawn cursor-agent ACP subprocesses per request.
+exec node /app/src/server.mjs