#66 FTX-66: Deployment cutover

/etc/futex/futex.env (rotated secrets 0640); futex-api.service (User=farshid, port 8020, EnvironmentFile, hardening) + futex-worker.service; disable old root futex.service (port 8000 collides with RunFlow - domain currently serves RunFlow!); nginx futex.conf -> 8020 + proxy_read_timeout 120s; pg_dump backup; mg up; smoke script. Phase 8.