Add Proxmox worker CT, off-box watch, backup, and tagged deploy.

NS1 is the Proxmox host. verae-proxmox creates LXC 510 (verae-px-worker
10.10.10.20 on vmbr1) with a private NATS proxy on 10.10.10.1:4222.
verae-uptime GET-watches public doors; verae-backup snapshots SQLite and
worm/tree data; verae-deploy does host-deps + checkout + npm ci.
Fleet overlays/ns1 are checked in (start.sh no longer rewrites JSON).
User systemd + linger for keep and fleet survive reboot.

packages/verae-uptime/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "verae-uptime",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "description": "Off-box HTTPS health watch for Verae Time × Zapier public doors",
+  "scripts": {
+    "start": "node src/watch.js",
+    "once": "node src/watch.js --once",
+    "test": "node --test test/*.test.js"
+  },
+  "engines": { "node": ">=20" }
+}