Atomic Deploys

Capistrano-style atomic releases: build the new release in a sibling directory, swap a symlink, restart the worker pool. Failed migrations preserve the previous release so a rollback is one symlink swap. SSH-based deploy from a local build — no in-cluster CI infrastructure required.