Move services to NAS (NAS-primary, Cloud Run backup)

Goal

NAS primary with automatic Cloud Run failover. Owner gave discretion to proceed.

Plan

• P0 Cloudflare Tunnel (owner's account)
• P1 failover helper: callService() NAS→Cloud
• P2 pilot workspace-billing-service + prove failover (kill NAS container)
• P3 pdf-renderer + receipt services
• P4 bank-login LAST (test OCBC from NAS IP first; residential-IP risk)
• Dual-deploy so the backup never drifts.