- CRM_USE_STUB: local runs no longer reach the live CRM. With only the
Checkbox stub, a stub receipt would still move the real order to PACKED.
Refused in production, same as CHECKBOX_USE_STUB.
- scripts/deploy.sh: backup, fast-forward main, build, health check and
code rollback on failure. scripts/backup.sh: pg_dump with verification
and 14-day rotation (used by cron and deploy.sh).
- Gitea Actions CI: ruff + pytest, oxlint + build.
- DEPLOY.md runbook; CLAUDE.md rules for safe local development.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
