docs(deploy): cochi redeploy guide + deploy skill

plan/14-deploy.md: git pull main + hard restart (compose down ->
build-stack.sh --up online), drasl/online, verify + rollback.
.claude/skills/deploy: skill to run it (pre-check, pull, hard restart,
verify) with prod guardrails.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

plan/14-deploy.md

@@ -0,0 +1,86 @@
+# Deployment — redeploy to `cochi`
+
+Production host for the Ulicraft stack.
+
+| | |
+|---|---|
+| Host | `cochi` (SSH alias) |
+| Path | `/home/ubuntu/mc/ulicraft-server-v1` |
+| Branch | `main` |
+| Run mode | `online` (compose files: `docker-compose.yml` + `docker-compose.static.yml`) |
+| Auth | Drasl (base stack — no Blessing Skin override) |
+| Restart | **hard** (`compose down` → `build-stack.sh --up`) — brief full downtime |
+
+## Routine redeploy
+
+```bash
+ssh cochi
+cd /home/ubuntu/mc/ulicraft-server-v1
+git pull --ff-only
+# hard restart: tear the stack down, then bring it back up (renders configs first)
+docker compose -f docker-compose.yml -f docker-compose.static.yml down --remove-orphans
+tooling/build-stack.sh --up online
+```
+
+Or as a one-shot from your workstation:
+
+```bash
+ssh cochi 'set -e
+  cd /home/ubuntu/mc/ulicraft-server-v1
+  git pull --ff-only
+  docker compose -f docker-compose.yml -f docker-compose.static.yml down --remove-orphans
+  tooling/build-stack.sh --up online'
+```
+
+`build-stack.sh --up online` runs preflight (checks `.env`), `render-config.sh`
+(which renders configs + `render-pack.sh` for the packwiz pack), then
+`docker compose ... up -d` with the online file set.
+
+## What survives a hard restart
+
+Named volumes persist — world and auth data are safe:
+- `mc_data` — world + installed NeoForge/mods
+- `drasl_state` — Drasl accounts/skins
+- `backups/` — mc-backup snapshots
+
+`down` removes **containers**, not volumes. Players are disconnected during the
+restart (a few minutes); they reconnect once `minecraft` is healthy again.
+
+## Prerequisites (one-time, on `cochi`)
+
+- SSH access as the `cochi` alias.
+- `.env` present and complete: `BASE_DOMAIN`, `HOST_LAN_IP`, `RCON_PASSWORD`
+  (`render-config.sh` halts on any unset var, even in online mode).
+- Docker + compose plugin, `packwiz`, `envsubst`, `git`.
+- **First deploy only** — heavy online prep (fetch launcher, pre-bake the server
+  volume, etc.):
+  ```bash
+  tooling/build-stack.sh --prep
+  ```
+  Not needed for routine redeploys; `--up` alone re-syncs the pack and configs.
+
+## Verify
+
+```bash
+docker compose -f docker-compose.yml -f docker-compose.static.yml ps
+docker compose -f docker-compose.yml -f docker-compose.static.yml logs -f minecraft   # watch for "Done"
+curl -fsS "http://auth.$(grep '^BASE_DOMAIN=' .env | cut -d= -f2)/" >/dev/null && echo "auth ok"
+```
+
+## Rollback
+
+```bash
+git log --oneline -5            # find the last-good commit
+git checkout <sha>              # or: git reset --hard <sha>
+docker compose -f docker-compose.yml -f docker-compose.static.yml down --remove-orphans
+tooling/build-stack.sh --up online
+```
+
+## Notes
+
+- **Online mode needs internet** on `cochi` at restart (no air-gap mirror): the
+  server installs NeoForge + mods over the network. For an internet-less deploy,
+  switch to `airgap` (needs `--prep` first) — see `plan/13-dns-and-run-modes.md`.
+- Switching to the **Blessing Skin** auth variant changes the file set to
+  `-f docker-compose.yml -f docker-compose.blessingskin.yml` (see
+  `plan/03b-blessing-skin.md`); update the `down`/`up` commands accordingly.