[grade=A] Shipdeck fleet module and manual deploy flow

Adds validated fleet install/lifecycle routes, bridge-backed Git and OCI workflows, persistent service cards, and the Local-tab Shipdeck deployment UI while preserving catalog and External flows.

Judge: urn:ump:if6udffdyelsf4qvskkr65ikhuprsjiajzij6h653fhf2zgyynzq

ops/shipdeck-bridge/shipdeck-bridge.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=shipdeck-bridge — token-gated HTTP wrapper for the shipdeck CLI (DashCaddy deploys panel)
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/python3 /opt/shipdeck-bridge/bridge.py
+Environment=SHIPDECK_BIN=/usr/local/bin/shipdeck
+Environment=SHIPDECK_BRIDGE_TOKEN_FILE=/etc/shipdeck/bridge-token
+Environment=SHIPDECK_REPOS_ROOT=/root
+Environment=SHIPDECK_BRIDGE_PORT=8977
+Restart=on-failure
+RestartSec=3
+# root: needs the ssh keys + fleet-dns that shipdeck orchestrates
+User=root
+
+[Install]
+WantedBy=multi-user.target