Arc Reactor was running from /opt/jarvis-arc with no version tracking. Added to deploy/ so all fixes (metrics_json→metric_data, flat JSON parsing, disk mount key fix) are captured. WG configs are runtime-generated secrets and must not be committed.