One runner (cf. @applications/prospector/run): services/deploy/status/logs/
restart over the services/ tree (each a dir with deploy.sh + compose.yml,
shipped to /opt/<svc>), plus a `tf` passthrough to terraform/do with the vault
token. Auto-discovers services; target from services/<svc>/.target else the
forge droplet; health from services/<svc>/.health. Fleet SSH uses a dedicated
known_hosts and self-heals a changed host key after a droplet rebuild.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
