feat(docker-watcher): phase 7 - deployer & health checker

Deploy orchestrator with full pipeline: pull → create container →
start → network → NPM proxy → health check. Rollback on failure,
multi-instance support, max_instances enforcement, webhook notifications.
Fix NPM auth in rollback and error logging in removeInstance.

plans/docker-watcher-core/PLAN.md

@@ -29,7 +29,7 @@ A self-hosted tool that automates Docker container deployment with Nginx Proxy M
 - [x] Phase 4: NPM Client [domain: backend] → [subplan](./phase-4-npm-client.md)
 - [x] Phase 5: Registry Client & Poller [domain: backend] → [subplan](./phase-5-registry-poller.md)
 - [x] Phase 6: Webhook Handler [domain: backend] → [subplan](./phase-6-webhook-handler.md)
-- [ ] Phase 7: Deployer & Health Checker [domain: backend] → [subplan](./phase-7-deployer.md)
+- [x] Phase 7: Deployer & Health Checker [domain: backend] → [subplan](./phase-7-deployer.md)
 - [ ] Phase 8: REST API Layer [domain: backend] → [subplan](./phase-8-api-layer.md)
 - [ ] Phase 9: SvelteKit Dashboard & Project Views [domain: frontend] → [subplan](./phase-9-dashboard.md)
 - [ ] Phase 10: Quick Deploy & Settings Pages [domain: frontend] → [subplan](./phase-10-settings-deploy.md)
@@ -51,8 +51,8 @@ A self-hosted tool that automates Docker container deployment with Nginx Proxy M
 | Phase 3: Docker Client | backend | ✅ Complete | ✅ Pass w/ fixes | ⏭️ Skip (Big Bang) | ✅ |
 | Phase 4: NPM Client | backend | ✅ Complete | ✅ Pass w/ fixes | ⏭️ Skip (Big Bang) | ✅ |
 | Phase 5: Registry & Poller | backend | ✅ Complete | ✅ Pass w/ fixes | ⏭️ Skip (Big Bang) | ✅ |
-| Phase 6: Webhook Handler | backend | ✅ Complete | ⬜ Pending | ⏭️ Skip (Big Bang) | ⬜ |
-| Phase 7: Deployer & Health | backend | ⬜ Not Started | ⬜ | ⏭️ Skip (Big Bang) | ⬜ |
+| Phase 6: Webhook Handler | backend | ✅ Complete | ✅ Pass w/ fixes | ⏭️ Skip (Big Bang) | ✅ |
+| Phase 7: Deployer & Health | backend | ✅ Complete | ✅ Pass w/ fixes | ⏭️ Skip (Big Bang) | ✅ |
 | Phase 8: API Layer | backend | ⬜ Not Started | ⬜ | ⏭️ Skip (Big Bang) | ⬜ |
 | Phase 9: Dashboard | frontend | ⬜ Not Started | ⬜ | ⏭️ Skip (Big Bang) | ⬜ |
 | Phase 10: Settings & Deploy | frontend | ⬜ Not Started | ⬜ | ⏭️ Skip (Big Bang) | ⬜ |

plans/docker-watcher-core/phase-7-deployer.md

@@ -1,6 +1,6 @@
 # Phase 7: Deployer & Health Checker
 
-**Status:** ⬜ Not Started
+**Status:** ✅ Complete
 **Parent plan:** [PLAN.md](./PLAN.md)
 **Domain:** backend
 
@@ -9,17 +9,17 @@ Implement the core deployment orchestrator: pull → start container → configu
 
 ## Tasks
 
-- [ ] Task 1: Define deployer service struct — depends on Docker client, NPM client, store, notifier
-- [ ] Task 2: Implement deploy flow: pull image → create container → start → connect to network → configure proxy → health check
-- [ ] Task 3: Implement subdomain generation per convention: `stage-{stage}-{project}` for default, `stage-{stage}-{project}-{tag}` for specific
-- [ ] Task 4: Sanitize tags for DNS (dots → dashes, lowercase, truncate)
-- [ ] Task 5: Implement health checker — HTTP GET to `http://container:{port}{healthcheck_path}` with retries and timeout
-- [ ] Task 6: Implement rollback on health check failure — remove new container, delete NPM proxy host, update instance status
-- [ ] Task 7: Implement multi-instance support — multiple tags of same project/stage can run simultaneously
-- [ ] Task 8: Implement max_instances enforcement — remove oldest instance when limit reached
-- [ ] Task 9: Implement notification webhook — POST to configured URL on deploy success/failure
-- [ ] Task 10: Create deploy history records in store (status, timestamps, logs)
-- [ ] Task 11: Implement deploy log streaming — append log entries during deploy for real-time visibility
+- [x] Task 1: Define deployer service struct — depends on Docker client, NPM client, store, notifier
+- [x] Task 2: Implement deploy flow: pull image → create container → start → connect to network → configure proxy → health check
+- [x] Task 3: Implement subdomain generation per convention: `stage-{stage}-{project}` for default, `stage-{stage}-{project}-{tag}` for specific
+- [x] Task 4: Sanitize tags for DNS (dots → dashes, lowercase, truncate)
+- [x] Task 5: Implement health checker — HTTP GET to `http://container:{port}{healthcheck_path}` with retries and timeout
+- [x] Task 6: Implement rollback on health check failure — remove new container, delete NPM proxy host, update instance status
+- [x] Task 7: Implement multi-instance support — multiple tags of same project/stage can run simultaneously
+- [x] Task 8: Implement max_instances enforcement — remove oldest instance when limit reached
+- [x] Task 9: Implement notification webhook — POST to configured URL on deploy success/failure
+- [x] Task 10: Create deploy history records in store (status, timestamps, logs)
+- [x] Task 11: Implement deploy log streaming — append log entries during deploy for real-time visibility
 
 ## Files to Modify/Create
 - `internal/deployer/deployer.go` — main deploy orchestrator