VM Deploy (Docker + Self-hosted Runner)

LLM Summary

• Deploy targets a single VM under /opt/lucille and relies on Docker Compose + systemd services.
• A self-hosted GitHub Actions runner builds and pushes every commit to main via scripts/deploy_docker_vm.sh.
• SAFE_COMMIT guards rollback, smoke tests gate release, and environment files remain external to the repo.
• Worker autoscaling uses a host-level scaler daemon invoked by backend heuristics; failure to install is logged but non-blocking.
• GitHub Actions runner is kept online via a systemd service; stale runners cause workflow queues.
• AI workflows should use docs/ai/modules/deploy.md for the concise module summary.

Appendix A: Deep background

The full operational runbook, optional Caddy, autoscaling details, key paths, and runner installation steps remain in the long-form doc:

• docs/human/deploy-long.md