App Lab tracer-bullet live + webhook

If you can read this, the App Lab orchestrator API path against Coolify works end-to-end:

1. GitHub repo created via API
2. Coolify resource created via POST /applications/private-github-app
3. Deployment triggered via POST /deploy?uuid=…
4. Container live, Let’s Encrypt cert auto-issued, served by Coolify-managed Traefik

Throwaway. Safe to delete after the spike concludes.