fix(deploy): atomic deploys — build in builds/<sha-stamp>, verify fresh dist, swap, health-check + auto-rollback
- Stage to timestamped builds/ dir; live custom-build untouched during install+build
- Verify dist exists, non-empty, newer than stage start (stale/partial fails)
- Symlink swap stays single atomic op; previous target saved for rollback
- Post-restart health-check on / (24x5s); on failure flip back, restart, notify, exit 1
- Prune to 2 newest builds on success; notify on failure (if: failure())
- Root cause: rm -rf custom-build destroyed the live dir mid-deploy; UI 404'd until build finished
bot-hermes
8975aeb870