ops: add guarded VPS page factory release kit

[CoreweaverLabs]

Summary

• add provider-neutral VPS baseline, immutable release, and local static-site preflight
• add Caddy and optional service templates with cache and logging defaults
• add a non-executable first-cutover manifest and dormant GitHub Actions deployment workflow

Guardrails

• no server provisioned or purchased
• no DNS, certificate, nameserver, or public routing change
• no provider credentials, hostname, server address, or SSH material committed
• automatic releases stay disabled until an approved server, host, and GitHub environment are configured

Validation

• node ops/vps/scripts/preflight.mjs
• bash -n ops/vps/scripts/release.sh
• git diff --check