k8s: rename test/dev hostnames → zoo-test.network / zoo-dev.network apex TLDs

Mirrors Lux's api.lux-test.network / api.lux-dev.network convention —
hyphenated env in the TLD, not a subdomain of zoo.network. All org
tooling reads the same shape.

- zoo-testnet/ingressroute.yaml: api.test.zoo.network →
  api.zoo-test.network (+ explore + api-explore variants).
- zoo-testnet/network-patch.yaml: ZooGateway.spec.hosts updated.
- zoo-devnet/ingressroute.yaml: api.dev.zoo.network →
  api.zoo-dev.network (+ explore variants).

CF zones for zoo-test.network + zoo-dev.network already exist (DNS
resolves through Cloudflare). DNS A records still need to be created
inside those zones pointing at the Zoo cluster ingress LB — separate
followup.

k8s/zoo-devnet/ingressroute.yaml

@@ -1,6 +1,6 @@
-# Zoo devnet IngressRoutes — dev.zoo.network host space, separate from
-# mainnet's api.zoo.network / explore.zoo.network. base IngressRoutes
-# are stripped via the kustomization patch.
+# Zoo devnet IngressRoutes — separate apex TLD `zoo-dev.network` mirrors
+# Lux's pattern (api.lux-dev.network). NOT `dev.zoo.network` subdomain —
+# the hyphenated env-in-TLD form is the canonical Lux ecosystem shape.
 apiVersion: hanzo.ai/v1alpha1
 kind: IngressRoute
 metadata:
@@ -11,7 +11,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`api.dev.zoo.network`)
+    - match: Host(`api.zoo-dev.network`)
       kind: Rule
       services:
         - name: zoo-chain-rpc
@@ -20,7 +20,7 @@ spec:
   tls:
     certResolver: letsencrypt
     domains:
-      - main: api.dev.zoo.network
+      - main: api.zoo-dev.network
 ---
 apiVersion: hanzo.ai/v1alpha1
 kind: IngressRoute
@@ -32,13 +32,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`explore.dev.zoo.network`)
+    - match: Host(`explore.zoo-dev.network`)
       kind: Rule
       services:
         - name: zoo-explorer-explorer
           port: 8090
           passHostHeader: false
-    - match: Host(`api-explore.dev.zoo.network`)
+    - match: Host(`api-explore.zoo-dev.network`)
       kind: Rule
       services:
         - name: zoo-explorer-explorer
@@ -47,5 +47,5 @@ spec:
   tls:
     certResolver: letsencrypt
     domains:
-      - main: explore.dev.zoo.network
-      - main: api-explore.dev.zoo.network
+      - main: explore.zoo-dev.network
+      - main: api-explore.zoo-dev.network

k8s/zoo-testnet/ingressroute.yaml

@@ -1,6 +1,11 @@
-# Zoo testnet IngressRoutes — distinct hosts from mainnet so both can
-# coexist on the same hanzoai/ingress proxy. Mainnet routes from
-# base/ingress.yaml are emptied by the kustomization deletion below.
+# Zoo testnet IngressRoutes — separate apex TLD `zoo-test.network` mirrors
+# Lux's pattern (api.lux-test.network). NOT `test.zoo.network` subdomain —
+# the hyphenated env-in-TLD form is the canonical Lux ecosystem shape so
+# all org tooling reads the same way.
+#
+# Mainnet routes (api.zoo.network, explore.zoo.network) live in base/ +
+# ride along the same hanzoai/ingress proxy. base routes are emptied by
+# the kustomization deletion when this overlay is applied.
 apiVersion: hanzo.ai/v1alpha1
 kind: IngressRoute
 metadata:
@@ -11,7 +16,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`api.test.zoo.network`)
+    - match: Host(`api.zoo-test.network`)
       kind: Rule
       services:
         - name: zoo-chain-rpc
@@ -20,7 +25,7 @@ spec:
   tls:
     certResolver: letsencrypt
     domains:
-      - main: api.test.zoo.network
+      - main: api.zoo-test.network
 ---
 apiVersion: hanzo.ai/v1alpha1
 kind: IngressRoute
@@ -32,13 +37,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`explore.test.zoo.network`)
+    - match: Host(`explore.zoo-test.network`)
       kind: Rule
       services:
         - name: zoo-explorer-explorer
           port: 8090
           passHostHeader: false
-    - match: Host(`api-explore.test.zoo.network`)
+    - match: Host(`api-explore.zoo-test.network`)
       kind: Rule
       services:
         - name: zoo-explorer-explorer
@@ -47,5 +52,5 @@ spec:
   tls:
     certResolver: letsencrypt
     domains:
-      - main: explore.test.zoo.network
-      - main: api-explore.test.zoo.network
+      - main: explore.zoo-test.network
+      - main: api-explore.zoo-test.network

k8s/zoo-testnet/network-patch.yaml

@@ -60,7 +60,7 @@ metadata:
 spec:
   networkRef: zoo-chain
   hosts:
-    - api.test.zoo.network
+    - api.zoo-test.network
   tls:
     enabled: true
     secretName: zoo-testnet-tls