Fix production website deployment target

[eoghankennedy]

Summary

• update the production deployment configuration for the migrated hosting environment
• make the manual test workflow build-only
• preserve incident backups during site synchronization
• verify the public TOSA index after deployment
• document least-privilege deployment access

Validation

• workflow YAML parsed successfully
• deployment shell scripts passed syntax checks
• git diff validation passed

Deployment-role hardening can be handled as a separate infrastructure follow-up.