Add GitHub PR preview deployments

[arjunkomath]

Summary

• add opt-in, stateless preview deployments for same-repository GitHub pull requests that are ready for review
• duplicate each enabled service into an isolated hidden preview service with inherited secrets and stable generated HTTPS URLs
• build exact GitHub merge refs, report deployment readiness to GitHub, and tear previews down on close, merge, draft conversion, disablement, or deletion
• add reconciliation, hidden-service authorization boundaries, dashboard controls, agent ref fetching, tests, and operator documentation

Verification

• cd web && pnpm test — 506 tests passed
• cd web && pnpm typecheck
• cd web && pnpm lint — 0 errors; 7 existing warnings
• cd agent && go test ./... && go build ./... && test -z "$(gofmt -l .)"
• cd cli && go test ./... && go build ./... && test -z "$(gofmt -l .)"

Deployment notes

• apply the database schema before deploying the control plane
• update the GitHub App with Pull requests read and Deployments write permissions and subscribe it to Pull request events
• configure Automatic Subdomain Domain with wildcard DNS before enabling previews
• end-to-end GitHub, DNS, certificate, and runtime verification still requires a configured test installation

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
techulus-cloud	🟢 Ready	View Preview	Aug 16, 2026, 9:28 AM

💡 Tip: Enable Workflows to automatically generate PRs for you.

[github-actions]

React Doctor found no new issues. 🎉

_{Reviewed by React Doctor for commit c091cc6.}