prod deployment

doc/gateway_container_creation.md

@@ -63,7 +63,7 @@ userId: "user-abc123"
 deploymentName: "sandbox-user-abc123"
 serviceName: "sandbox-user-abc123"
 pvcName: "sandbox-user-abc123-data"
-mcpEndpoint: "http://sandbox-user-abc123.dexorder-sandboxes.svc.cluster.local:3000"
+mcpEndpoint: "http://sandbox-user-abc123.sandbox.svc.cluster.local:3000"
 ```
 
 User IDs are sanitized to be Kubernetes-compliant (lowercase alphanumeric + hyphens).
@@ -145,7 +145,7 @@ Environment variables:
 
 ```bash
 # Kubernetes
-KUBERNETES_NAMESPACE=dexorder-sandboxes
+KUBERNETES_NAMESPACE=sandbox
 KUBERNETES_IN_CLUSTER=true         # false for local dev
 KUBERNETES_CONTEXT=minikube        # for local dev only
 
@@ -162,9 +162,9 @@ SANDBOX_STORAGE_CLASS=standard
 The gateway uses a restricted ServiceAccount with RBAC:
 
 **Can do:**
-- ✅ Create deployments in `dexorder-sandboxes` namespace
-- ✅ Create services in `dexorder-sandboxes` namespace
-- ✅ Create PVCs in `dexorder-sandboxes` namespace
+- ✅ Create deployments in `sandbox` namespace
+- ✅ Create services in `sandbox` namespace
+- ✅ Create PVCs in `sandbox` namespace
 - ✅ Read pod status and logs (debugging)
 - ✅ Update deployments (future: resource scaling)
 
@@ -226,7 +226,7 @@ kubectl apply -k deploy/k8s/dev
 # .env
 KUBERNETES_IN_CLUSTER=false
 KUBERNETES_CONTEXT=minikube
-KUBERNETES_NAMESPACE=dexorder-sandboxes
+KUBERNETES_NAMESPACE=sandbox
 ```
 
 4. Run gateway:
@@ -242,9 +242,9 @@ wscat -c "ws://localhost:3000/ws/chat" -H "Authorization: Bearer your-jwt"
 
 The gateway will create deployments in minikube. View with:
 ```bash
-kubectl get deployments -n dexorder-sandboxes
-kubectl get pods -n dexorder-sandboxes
-kubectl logs -n dexorder-sandboxes sandbox-user-abc123 -c agent
+kubectl get deployments -n sandbox
+kubectl get pods -n sandbox
+kubectl logs -n sandbox sandbox-user-abc123 -c agent
 ```
 
 ## Production Deployment
@@ -262,7 +262,7 @@ kubectl apply -k deploy/k8s/prod
 ```
 
 3. Gateway runs in `dexorder-system` namespace
-4. Creates agent containers in `dexorder-sandboxes` namespace
+4. Creates agent containers in `sandbox` namespace
 5. Admission policies enforce image allowlist and security constraints
 
 ## Monitoring