Fix Cloud Run domain mapping and DNS configuration

- Change CNAME target from Cloud Run URL to ghs.googlehosted.com
- Set Cloudflare proxy to false (DNS-only mode required for domain mapping)
- This follows Google Cloud Run best practices for custom domain setup
- Users can manually enable proxy in Cloudflare after domain mapping completes

Author: dcmcand

dns.tf

@@ -1,12 +1,12 @@
 
-# DNS CNAME record for application subdomain pointing to hrafnar application
+# DNS CNAME record for application subdomain pointing to Google Cloud Run
 resource "cloudflare_record" "app" {
   count   = var.enable_cloudflare_dns && var.base_domain != "" ? 1 : 0
   zone_id = var.cloudflare_zone_id
   name    = var.app_subdomain
-  content = replace(google_cloud_run_service.main_app.status[0].url, "https://", "")
+  content = "ghs.googlehosted.com"
   type    = "CNAME"
-  proxied = true
+  proxied = false  # Must be DNS-only initially for domain mapping to work
 
   comment = "Managed by Terraform - Application endpoint for ${local.resource_prefix} hrafnar application"