feat(server): expose project deployment status

[Canvinus]

Summary

• expose GET /v1/projects/{id}/deployments for truthful DEV/PROD runtime state
• return only running state, an opaque revision, and deployment time while rejecting foreign container label collisions
• publish generated protocol types and AgentClient.getProjectDeployments

Security

• runtime commands use argument-vector spawning with a bounded timeout
• container and image IDs, labels, environment, mounts, and secrets never leave agent-server
• runtime failures return 503 instead of appearing as an undeployed app

Testing

• npm run check
• npm run typecheck
• npm run build
• npm test -w packages/agent-server
• npm test -w packages/agent-protocol
• npm test -w packages/agent-client

[neuromaxer]

lgtm