Governed deploys

Deploys are product operations, not local provider commands. A site deploy must produce an operation_run, public health evidence, and a rollback target.