feat: static sites feature with Gitea/GitHub/GitLab support and Deno backend

Deploy static content from Git repository folders with optional server-side
API endpoints. Supports Gitea/Forgejo/Gogs, GitHub, and GitLab with provider
autodetection.

- New Sites entity with CRUD, encrypted secrets, and manual/push/tag sync triggers
- Pluggable GitProvider interface with three implementations
- Deno container mode: auto-generates router from API_{method}_{name} exports
- Static container mode: nginx serving files with optional markdown rendering
- Wizard UI with provider selector, repo picker, branch/folder tree pickers
- Deploy pipeline builds fresh image, starts container, configures NPM proxy
- Stop/Start buttons, force redeploy on manual trigger
- Periodic health checker detects crashed containers
- Proxy route existence check during auto-sync

internal/store/models.go

@@ -195,6 +195,43 @@ type Volume struct {
 	UpdatedAt string `json:"updated_at"`
 }
 
+// StaticSite represents a static site deployed from a Git repository folder.
+type StaticSite struct {
+	ID             string `json:"id"`
+	Name           string `json:"name"`
+	Provider       string `json:"provider"`         // "gitea", "github", "gitlab"; empty = autodetect
+	GiteaURL       string `json:"gitea_url"`       // base URL, e.g. https://git.example.com
+	RepoOwner      string `json:"repo_owner"`
+	RepoName       string `json:"repo_name"`
+	Branch         string `json:"branch"`
+	FolderPath     string `json:"folder_path"`      // path within repo, e.g. "Pages"
+	AccessToken    string `json:"access_token"`      // encrypted; optional for public repos
+	Domain         string `json:"domain"`            // full domain for proxy
+	Mode           string `json:"mode"`              // "static" or "deno"
+	RenderMarkdown bool   `json:"render_markdown"`
+	SyncTrigger    string `json:"sync_trigger"`      // "push", "tag", "manual"
+	TagPattern     string `json:"tag_pattern"`        // glob pattern for tag-based sync
+	ContainerID    string `json:"container_id"`
+	ProxyRouteID   string `json:"proxy_route_id"`
+	Status         string `json:"status"`            // idle, syncing, deployed, failed
+	LastSyncAt     string `json:"last_sync_at"`
+	LastCommitSHA  string `json:"last_commit_sha"`
+	Error          string `json:"error"`
+	CreatedAt      string `json:"created_at"`
+	UpdatedAt      string `json:"updated_at"`
+}
+
+// StaticSiteSecret represents an encrypted environment variable for a static site's Deno backend.
+type StaticSiteSecret struct {
+	ID        string `json:"id"`
+	SiteID    string `json:"site_id"`
+	Key       string `json:"key"`
+	Value     string `json:"value"`
+	Encrypted bool   `json:"encrypted"`
+	CreatedAt string `json:"created_at"`
+	UpdatedAt string `json:"updated_at"`
+}
+
 // EventLog represents a persistent event log entry.
 type EventLog struct {
 	ID        int64  `json:"id"`