fix(deploy): stop hanging on per-file sticky-bit scan

Only clear paths that already have skip-worktree/assume-unchanged; keep nuclear src replace and content verify.

Co-authored-by: Cursor <[email protected]>

src/lib/deploy-workflow-contract.test.ts

@@ -24,13 +24,14 @@ describe("production deploy workflow", () => {
 		expect(resetAt).toBeGreaterThan(reclaimAt);
 	});
 
-	it("nuclear-replaces src/ and verifies every tracked blob hash", () => {
+	it("nuclear-replaces src/ and clears sticky bits without scanning every path", () => {
 		expect(workflow).toContain("rm -rf src");
 		expect(workflow).toContain("git checkout -f HEAD -- src");
-		expect(workflow).toContain("git hash-object");
 		expect(workflow).toContain("no-skip-worktree");
 		expect(workflow).toContain("no-assume-unchanged");
-		expect(workflow).toContain("Verified all tracked src/ blobs match HEAD");
+		expect(workflow).toContain("Verified src/ matches HEAD");
+		expect(workflow).toContain("git ls-files -v");
+		expect(workflow).not.toContain("git ls-files -z");
 		expect(workflow).toContain("pnpm typecheck");
 	});