deploy: Docker compose + entrypoint (pull-loop autosync), Nix revert script, .env (gitignored) for Gitea deploy token

deploy/fix-pull-path.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# Fix kontra-pull ExecStart: /bin/bash -> /run/current-system/sw/bin/bash on .13
+set -euo pipefail
+CFG=/etc/nixos/configuration.nix
+BAK=$CFG.bak-kontra-fix-$(date +%Y%m%d-%H%M%S)
+cp -a "$CFG" "$BAK"
+sed -i 's|/bin/bash /var/www/kontra_day/bin/kontra-pull.sh|/run/current-system/sw/bin/bash /var/www/kontra_day/bin/kontra-pull.sh|' "$CFG"
+echo "patched. verifying:"
+grep -n "kontra-pull.sh" "$CFG"
+nix-instantiate --parse "$CFG" >/dev/null && echo "Nix syntax OK"
+echo "== nixos-rebuild switch =="
+nixos-rebuild switch --show-trace 2>&1 | tail -25
+echo "== status =="
+systemctl --no-pager status kontra-pull.service 2>/dev/null | head -8 || true