feat(deploy): port padelnomics deploy.sh improvements to web/deploy.sh

- Auto-install sops + age binaries to web/bin/ if not present
- Generate age keypair at repo root age-key.txt if missing (prints public
  key with instructions to add to .sops.yaml, then exits)
- Decrypt .env.prod.sops → web/.env at deploy time (no CI secrets needed)
- Backup SQLite DB before migration (timestamped, keeps last 3)
- Rollback on health check failure: dump logs + restore DB backup
- Reset nginx router to current slot before --wait to avoid upstream errors
- Remove web/scripts/deploy.sh (duplicate)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

web/scripts/deploy.sh

@@ -1,22 +0,0 @@
-#!/bin/bash
-set -e
-
-# BeanFlows Deployment Script
-
-echo "🚀 Deploying BeanFlows..."
-
-# Pull latest code
-git pull origin main
-
-# Build and restart containers
-docker compose build
-docker compose up -d
-
-# Run migrations
-docker compose exec app uv run python -m beanflows.migrations.migrate
-
-# Health check
-sleep 5
-curl -f http://localhost:5000/health || exit 1
-
-echo "✅ Deployment complete!"