fix(deploy): LXC portal sync tolerates unset optional .env vars

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/deployment/deploy-omnl-banking-portal-pct.sh

@@ -60,8 +60,10 @@ tar -czf "$STAGE" \
 
 if [[ -f "$REPO_DIR/.env" ]]; then
   set -a
+  set +u
   # shellcheck disable=SC1090
   source "$REPO_DIR/.env"
+  set -u
   set +a
   if bash "$SCRIPT_DIR/generate-portal-nginx-auth-snippet.sh" "$CTID" "$REPO_DIR/deploy/nginx/omnl-portal-auth-${CTID}.conf.inc" 2>/dev/null; then
     cp "$REPO_DIR/deploy/nginx/omnl-portal-auth-${CTID}.conf.inc" "$REPO_DIR/deploy/nginx/omnl-portal-auth-current.conf.inc"

scripts/deployment/sync-ali-omnl-banking-portal-lxcs.sh

@@ -47,9 +47,8 @@ log "Config: $LXC_CONFIG"
 log "PVE: ${OMNL_PVE_SSH_TARGET} (sudo prefix: ${OMNL_PVE_SSH_PREFIX[*]:-none})"
 
 if $APPLY; then
-  log "Building stack once on dev..."
-  cd "$REPO_DIR"
-  bash scripts/deployment/deploy-omnl-bank-production.sh
+  log "Using stack built in step 1 — skip duplicate full deploy"
+  export OMNL_SKIP_BUILD=1
 fi
 
 synced=0