Block a user
fix: exclude deploy/ folder from changed-stack detection
fix: prevent envsubst+Compose double-interpolation from truncating $ secrets
fix(ai): use AI_-prefixed AWS key names in ai) provisioning case
HOTFIX: restore $${VAR} escaping dropped by AI secrets migration rewrite
ai: migrate AWS/LiteLLM/OpenWebUI/OAuth secrets to Woodpecker