[main]: Update home-server

docs/home-server/deployment.md

@@ -8,12 +8,13 @@ last_reviewed: "2026-10-06"
 sources:
   - kind: owner-report
     reference: "Portainer GitHub/main/PAT configuration, environment management and manual pull/redeploy workflow, 2026-10-06"
-related: [home-server.reference, home-server.host, home-server.portainer, home-server.authentication, home-server.backups]
+  - kind: owner-report
+    reference: "No independent credential recovery; operational rules not established, 2026-10-06"
+related: [home-server.reference, home-server.host, home-server.portainer, home-server.authentication, home-server.backups, home-server.operations]
 update_triggers: [deployment-workflow-change, repository-change, credential-rotation, rollback-policy-change]
 unknowns:
-  - github-pat-scopes-expiration-and-independent-recovery
-  - rollback-and-post-deployment-health-procedure
-  - rules-for-portainer-ui-versus-repository-drift
+  - github-pat-scopes-and-expiration
+  - post-deployment-health-criteria
 ---
 
 # Deployment
@@ -39,5 +40,9 @@ repository credentials and stack environment values. [Portainer backups](backups
 exist; credential/state restoration is untested. Do not put secret values in
 this site or Git.
 
+No independent recovery arrangement exists for the PAT or stack secrets.
+Rollback, health-check gates, approval rules and UI-versus-Git drift policy
+are not established; do not assume permission to deploy, stop or delete services.
+
 Host apt packages, fstab, RAID assembly, systemd units and Mercury nginx are
 outside the Compose deployment workflow.