chore: sync workspace — configs, docs, scripts, CI, pnpm, submodules

- Submodule pins: dbis_core, cross-chain-pmm-lps, mcp-proxmox (local, push may be pending), metamask-integration, smom-dbis-138
- Atomic swap + cross-chain-pmm-lops-publish, deploy-portal workflow, phoenix deploy-targets, routing/aggregator matrices
- Docs, token-lists, forge proxy, phoenix API, runbooks, verify scripts

Made-with: Cursor

phoenix-deploy-api/.env.example

@@ -4,6 +4,7 @@ PORT=4001
 GITEA_URL=https://gitea.d-bis.org
 GITEA_TOKEN=
 PHOENIX_DEPLOY_SECRET=
+PHOENIX_WEBHOOK_DEPLOY_ENABLED=0
 
 # Proxmox (for Infra/VE API; omit for stub responses)
 PROXMOX_HOST=
@@ -32,4 +33,6 @@ PHOENIX_PARTNER_KEYS=
 # Optional: override path for GET /api/v1/public-sector/programs (else bundled copy, repo config/, or ../config/)
 PUBLIC_SECTOR_MANIFEST_PATH=
 # Optional: proxmox repo root on host (manifest = $PHOENIX_REPO_ROOT/config/public-sector-program-manifest.json)
-PHOENIX_REPO_ROOT=
+PHOENIX_REPO_ROOT=/home/intlc/projects/proxmox
+# Optional: deploy target config file (defaults to phoenix-deploy-api/deploy-targets.json)
+DEPLOY_TARGETS_PATH=