fix(deploy): wait for the expected HTTP release and report failed probes

scripts/ci-deploy.sh

@@ -49,6 +49,7 @@ finish() {
   if [ "$status" -ne 0 ] && [ "$cutover_started" -eq 1 ]; then
     echo "Deployment failed; restoring previous container" >&2
     docker logs epicnext-cms-app --tail 50 >&2 || true
+    if command -v ss >/dev/null 2>&1; then ss -ltnp 'sport = :3002' >&2 || true; fi
     if [ "$candidate_attempted" -eq 1 ]; then docker rm -f epicnext-cms-app || true; fi
     if [ "$backup_created" -eq 1 ]; then docker rename "$backup_name" "$previous_name" || true; fi
     if [ -n "$previous_name" ]; then
@@ -123,7 +124,7 @@ candidate_attempted=1
     ENV_ARGS+=(-e "$key")
   done < "$deploy_dir/.env"
   docker run -d --name epicnext-cms-app --restart always --net=host \
-    "${ENV_ARGS[@]}" \
+    "${ENV_ARGS[@]}" -e PORT=3002 -e HOSTNAME=0.0.0.0 \
     -v "$deploy_dir/public/nitro-assets:/app/public/nitro-assets" \
     -v "$deploy_dir/public/swf:/app/public/swf" \
     -v "$deploy_dir/storage:/app/storage" \
@@ -131,7 +132,7 @@ candidate_attempted=1
     "$image"
 )
 healthy
-node --input-type=module -e 'const r=await fetch("http://127.0.0.1:3002/api/health",{cache:"no-store",signal:AbortSignal.timeout(5000)});const d=await r.json();if(!r.ok||d.release!==process.argv[1]){console.error("Release mismatch",d.release,process.argv[1]);process.exit(1)}' "$sha"
+node scripts/verify-deployed-release.mjs http://127.0.0.1:3002/api/health "$sha"
 PLAYWRIGHT_BASE_URL=http://127.0.0.1:3002 pnpm test:e2e
 # Publish the latest alias only after health and browser checks pass.
 docker tag "$image" epicnext-cms:latest