ci: verify SLL-R production delivery

[jh1nresh]

Summary

• encode the merchant offer-to-receipt state boundary in repo rails
• expose deployment revision on GET /health
• verify the exact merged commit reaches production on a durable Supabase or Redis REST store
• upload a delivery receipt without creating orders, payment attempts, receipts, cron runs, or merchant mutations
• validate manual commit input before it reaches shell output

Verification

• pnpm check (TypeScript build + full smoke)
• pnpm audit --prod --audit-level high (no known vulnerabilities)
• positive exact-revision/durable-store fixture
• negative in-memory-store fixture
• workflow YAML parse and git diff --check

Delivery

No production mutation, merchant outreach, payment action, merge, or deployment was performed.