Epic 7: Infra and deploy modernisation

Bring the deployment surroundings up to standard: pinned container images, a hardened deploy pipeline, offsite backups, request logging, and an external uptime alert. Beszel already covers machine and container metrics, this fills the request-level and is-the-site-actually-up gaps.