Initial commit — SvelteKit fleet manager for T5 Plutonium servers

Ports push_scripts.sh (1497 lines of bash) to a SvelteKit + SQLite web app
that manages a fleet of T5 Plutonium servers running on Komodo. Same push
and beta workflow as the shell script, with a live SSE pipeline view, a
!rt-token-gated auth modal that hard-pauses deployments on stale tokens,
per-file audit diffs, and a Komodo-container deployment target.

- Push/beta engines port the exact filter, held-by-beta, conflict, and
  stale-backup rules from the shell script
- SQLite (better-sqlite3) replaces script_metadata.json; a one-shot
  importer moves legacy state over on first boot
- 16 vitest tests cover push add/update/skip, beta open→rollback,
  open→promote, conflict guards, sweep frozen/manual branches, and IW4M
  login/status parsing
- docker/ + komodo/stack.toml deploy as a managed container on the same
  host as the game servers, /root/zombies bind-mounted at the same path
  the shell script used

src/routes/api/deployments/[id]/+server.ts

@@ -0,0 +1,28 @@
+import { json, error } from '@sveltejs/kit';
+import { db } from '$lib/server/db/index.js';
+
+export async function GET({ params }: { params: { id: string } }) {
+    const dep = db()
+        .prepare('SELECT * FROM deployments WHERE id = ?')
+        .get(params.id) as Record<string, unknown> | undefined;
+    if (!dep) throw error(404, 'deployment not found');
+
+    const servers = db()
+        .prepare('SELECT * FROM deployment_servers WHERE deployment_id = ? ORDER BY server')
+        .all(params.id);
+
+    // Don't ship blobs in the summary — the client asks for a single file when
+    // it opens the diff viewer.
+    const files = db()
+        .prepare(
+            `SELECT id, server, verb, rel_path, sha256_before, sha256_after,
+                    LENGTH(content_before) AS size_before,
+                    LENGTH(content_after)  AS size_after
+             FROM deployment_files
+             WHERE deployment_id = ?
+             ORDER BY server, rel_path`
+        )
+        .all(params.id);
+
+    return json({ deployment: dep, servers, files });
+}

src/routes/api/deployments/[id]/file/[fileId]/+server.ts

@@ -0,0 +1,34 @@
+import { json, error } from '@sveltejs/kit';
+import { db } from '$lib/server/db/index.js';
+
+// Streams a single deployment_files row's before/after blobs as UTF-8 text
+// so the DiffViewer can render a unified diff without a second query.
+
+export async function GET({ params }: { params: { id: string; fileId: string } }) {
+    const row = db()
+        .prepare(
+            `SELECT verb, rel_path, sha256_before, sha256_after, content_before, content_after
+             FROM deployment_files
+             WHERE deployment_id = ? AND id = ?`
+        )
+        .get(params.id, Number(params.fileId)) as
+        | {
+              verb: string;
+              rel_path: string;
+              sha256_before: string | null;
+              sha256_after: string | null;
+              content_before: Buffer | null;
+              content_after: Buffer | null;
+          }
+        | undefined;
+    if (!row) throw error(404, 'file not found');
+
+    return json({
+        verb: row.verb,
+        relPath: row.rel_path,
+        sha256Before: row.sha256_before,
+        sha256After: row.sha256_after,
+        before: row.content_before ? row.content_before.toString('utf8') : null,
+        after: row.content_after ? row.content_after.toString('utf8') : null
+    });
+}