feat(deploy): Complete mini-PaaS deployment system (t-266)

- Add Omni/Deploy/ with Manifest, Deployer, Systemd, Caddy modules
- Manifest CLI: show, update, add-service, list, rollback commands
- Deployer: polls S3 manifest, pulls closures, manages systemd units
- Caddy integration for dynamic reverse proxy routes
- bild: auto-cache to S3, outputs STORE_PATH for push.sh
- push.sh: supports both NixOS and service deploys
- Biz.nix: simplified to base OS + deployer only
- Services (podcastitlater-web/worker) now deployer-managed
- Documentation: README.md with operations guide

1 files changed, 9 insertions, 14 deletions

diff --git a/Biz.nix b/Biz.nix
index c9e91c3..676fac8 100755
--- a/Biz.nix
+++ b/Biz.nix
@@ -22,23 +22,18 @@ bild.os {
     ./Omni/Os/Base.nix
     ./Omni/Packages.nix
     ./Omni/Users.nix
-    ./Biz/Storybook.nix
-    ./Biz/PodcastItLater/Web.nix
-    ./Biz/PodcastItLater/Worker.nix
+    ./Omni/Deploy/Deployer.nix
   ];
   networking.hostName = "biz";
-  networking.domain = "storybook.bensima.com";
+  networking.domain = "podcastitlater.bensima.com";
   time.timeZone = "America/New_York";
-  services.storybook = {
-    enable = false;
-    package = packages.storybook;
-  };
-  services.podcastitlater-web = {
-    enable = true;
-    package = packages.podcastitlater-web;
-  };
-  services.podcastitlater-worker = {
+
+  # Mini-PaaS deployer service manages all application services
+  # via manifest.json in S3. Services like podcastitlater-web,
+  # podcastitlater-worker are deployed dynamically without NixOS rebuild.
+  services.biz-deployer = {
     enable = true;
-    package = packages.podcastitlater-worker;
+    package = packages.biz-deployer;
+    manifestPackage = packages.deploy-manifest;
   };
 }