added deploy watch, pull script. minor refactors

docker-compose.yml

@@ -8,6 +8,13 @@ services:
     environment:
       - NODE_ENV=production
       - NEXT_TELEMETRY_DISABLED=1
+      # Bearer token for POST /api/deploy. Set it in a .env file next to this
+      # compose file (gitignored); the route returns 404 when it is unset.
+      - DEPLOY_TRIGGER_SECRET=${DEPLOY_TRIGGER_SECRET:-}
+      - DEPLOY_TRIGGER_DIR=/deploy-trigger
+    volumes:
+      # Shared with scripts/deploy-watch.sh on the host.
+      - ./deploy-trigger:/deploy-trigger
     restart: unless-stopped
     healthcheck:
       test: ["CMD", "wget", "--spider", "-q", "http://localhost:3050"]