fix(deploy): nuclear-replace src to defeat skip-worktree ghosts

Host built a different event-form than HEAD while git looked clean; delete src, restore from git objects, and hash-verify every tracked blob.

Co-authored-by: Cursor <[email protected]>

src/lib/deploy-workflow-contract.test.ts

@@ -24,11 +24,13 @@ describe("production deploy workflow", () => {
 		expect(resetAt).toBeGreaterThan(reclaimAt);
 	});
 
-	it("verifies src/ and nitro blob match HEAD before typecheck", () => {
-		expect(workflow).toContain("git diff --exit-code -- src");
+	it("nuclear-replaces src/ and verifies every tracked blob hash", () => {
+		expect(workflow).toContain("rm -rf src");
+		expect(workflow).toContain("git checkout -f HEAD -- src");
 		expect(workflow).toContain("git hash-object");
-		expect(workflow).toContain("nitro-editor-dialog.tsx");
-		expect(workflow).toContain("*.tsbuildinfo");
+		expect(workflow).toContain("no-skip-worktree");
+		expect(workflow).toContain("no-assume-unchanged");
+		expect(workflow).toContain("Verified all tracked src/ blobs match HEAD");
 		expect(workflow).toContain("pnpm typecheck");
 	});