feat(nowchess): wire TOURNAMENT_SERVICE_URL and TOURNAMENT_SELF_URL

- Official-bots now targets local tournament service (TOURNAMENT_SERVICE_URL)
  instead of calling remote cluster directly
- TOURNAMENT_SELF_URL tells each cluster's tournament and official-bots
  services their own public URL for cross-cluster replication
- htwg-1-prod: remove TOURNAMENT_SERVER_URL, add both new vars with correct
  values (tournament active service + node IP for self-announcement)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

nowchess/base/nowchess-rollouts.yaml

@@ -441,6 +441,10 @@ spec:
                   key: INTERNAL_SECRET
             - name: ACCOUNT_SERVICE_URL
               value: http://nowchess-account-active:8083
+            - name: TOURNAMENT_SERVICE_URL
+              value: http://nowchess-tournament-active:8086
+            - name: TOURNAMENT_SELF_URL
+              value: ""
             - name: MP_JWT_VERIFY_PUBLICKEY_LOCATION
               value: /secrets/jwt/public.pem
             - name: MP_JWT_VERIFY_ISSUER
@@ -887,6 +891,8 @@ spec:
                 secretKeyRef:
                   name: ncs-db-secrets
                   key: ACCOUNT_DB_URL
+            - name: TOURNAMENT_SELF_URL
+              value: ""
             - name: MP_JWT_VERIFY_PUBLICKEY_LOCATION
               value: /secrets/jwt/public.pem
           volumeMounts: