feat(agent): add publish-health watchdog

[Oba-One]

Summary

• add a static public website build-metadata artifact tied to the approved operational snapshot
• persist Directus publish-health state and queue durable stale, build-failed, and recovery notifications through the existing Resend delivery path
• reconcile the active Directus CMS plan while keeping PRD-809 and production activation outside this change

Validation

• shared and agent package TypeScript compile passes
• agent contract suites pass: 82 tests
• public content contract suite passes: 23 tests
• plan contract suite passes: 7 tests
• bun --no-env-file scripts/plan-hub.ts validate validates 10 plan hubs
• Astro production build passes: 47 pages, including /build-metadata.json
• full root bun run typecheck remains blocked by four unchanged PRD-809 errors in scripts/directus-studio-setup.ts at lines 942, 1012, 1015, and 1334

Release boundary

This draft does not apply migration 028, deploy Fly, change Fly secrets or token permissions, enable the watchdog, or perform a live alert test. Production activation remains a separate reviewed release step.

Closes PRD-808

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 0076ffb8-62fc-4516-82d2-6d055f4ecf40

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}