test(matrix): deploy-lifecycle block integration tests (move exempt→mapped) (#251)

Close the deploy-lifecycle routes in the done-bar guard's
routeCoverageExemptions with real DB-backed integration tests and move
them exempt→mapped. USER-FLOW-INVENTORY-AND-TEST-MATRIX.md §D5–D10.

New suite: internal/handlers/deploy_lifecycle_block_integration_test.go
(testhelpers.SetupTestDB + NewTestAppWithServices, the production
RequireAuth chain against a real Postgres; reuses seedInternalDeploy /
MustCreateTeamDB / MustSignSessionJWT — no helper redefinition). 12 tests:

  GET   /api/v1/deployments/:id/events  — timeline DESC order + cross-team 404
  PATCH /deploy/:id/env                 — merge + secret redaction + cross-team 404
  POST  /deploy/:id/redeploy            — CAS happy 202 + terminal-row 409
  PATCH /api/v1/deployments/:id         — Pro sets-private 200 + hobby 402 tier-gate
  POST  /api/v1/deployments/:id/make-permanent — happy + cross-team 404
  POST  /api/v1/deployments/:id/ttl     — happy + out-of-range 400

Heavy Kaniko-build legs assert the accepted/contract surface (noop
compute), not a live build — deferred to the W4 e2e specs.

Guard: 6 deploy-lifecycle routes moved routeCoverageExemptions →
routeTestMap (85→91 mapped, 86→80 exempt). GitHub-link rows
(:id/github) stay exempt (D17/W6). Both done-bar guards green
(TestDoneBar_EveryRouteCovered + TestDoneBar_TestMapPointsAtRealTests).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mastermanas805