[margrop]

Summary

• deploy Preview automatically after every push or merge to main
• retain manual Preview dispatch for reruns
• keep Production deployment restricted to an explicit manual workflow_dispatch with target=production
• serialize Preview and Production deployments in one concurrency group
• align Cloudflare deployment docs and ADR-0005 with the release behavior
• document that custom ports are enabled by the current Workers compatibility date

Verification

• npm ci --cache /tmp/margrop-labs-preview-auto-npm-cache
• ASTRO_TELEMETRY_DISABLED=1 npm run validate
  • formatting, lint, type checks, build, static/privacy checks passed
  • 24 test files / 275 tests passed
• XDG_CONFIG_HOME=/tmp/margrop-labs-preview-auto-wrangler npm run deploy:check:preview --workspace @margrop-labs/web
• XDG_CONFIG_HOME=/tmp/margrop-labs-preview-auto-wrangler npm run deploy:check --workspace @margrop-labs/web
• git diff --check

Risk / privacy / cost

• no Secret, API key, model, browser bundle, quota, privacy, or upstream cost-policy change
• Production is not automatically deployed
• the deployment workflow intentionally repeats the quality gate before publishing Preview