597cbd40f8
The production bot now tracks conjurer-bot-deploy instead of conjurer-bot, so it updates only when the conjurer CI promotes a build (commit message contains [deploy]). Adds the image-updater 'deploy-bot' alias and the kustomization images entry for it; DEPLOY-BOT.md documents the channel and the one-time bootstrap. Test bot + librarian keep tracking every build. Pairs with conjurer#20 (the CI promotion step). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>