feat: add proxy node deployment workflow

[structName]

Summary

• add SSH-based proxy node deployment templates, run history, generated-node review/import, managed/custom proxy routes, and runtime cache support
• add the deployment UI with guided creation, run table, separated node artifacts/diagnostics/logs, and responsive information hierarchy
• package standalone deployment verification/runtime assets in release builds
• add a CI sensitive-data gate that rejects real public IPs, local absolute paths, forwarding ports, private keys, and credential tokens from deployment-related files

Validation

• scripts/check-deployment-sensitive-data.sh
• go test ./internal/deploy ./internal/api ./internal/database ./internal/storage ./internal/builder
• go test ./internal/daemon
• remaining Go package tests with GOFLAGS=-buildvcs=false
• npm --prefix web run build
• bash scripts/package-deployment-assets.sh --output /tmp/sbm-deployment-assets.tar.gz
• CGO_ENABLED=0 GOFLAGS=-buildvcs=false go build -o /tmp/sbm-pr-build ./cmd/sbm/
• git diff --check origin/main...HEAD

Security / privacy

• repository documentation uses RFC documentation addresses only
• local VPS addresses, run IDs, copied profile paths, and browser-forwarding ports were removed before publication
• real-host verification details remain outside the repository