Cloudflare token unified for Kura regional deployments

Kura regional deployments now use a single, consistent Cloudflare API token from the tuist-k8s-production vault. The previous token wiring was restored, and the onboarding documentation was updated with the required Cloudflare permissions, so regional Kura rollouts are unblocked.