[rafiki270]

Summary

• Deliver AgQL's runner-built production image as a checksummed Actions archive. The organization disables public GHCR packages, and the shared host cannot read the private package.
• Require the manual operator to verify, transfer, and load the archive. The deploy script checks the preloaded image's source revision and platform, then pins its content ID for Compose startup.
• Preserve the existing seed option, readiness and authenticated query checks. No registry credentials or host image build are required.

Testing

• Passed: seven focused deploy/Compose/workflow tests, Bash syntax, and git diff --check.
• The runner archive build, host transfer/load, and live release remain unverified. The artifact is retained for 30 days.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.