fix(makalu): isolate core deploy from faucet gate

[bachal-mb]

Incident

MX-03 merge deployment run 31819790372 served the expected release SHA and passed the core explorer routes, but failed because the core health gate required the deliberately undeployed MX-02 faucet schema. Automatic rollback succeeded.

Fix

• keep the automatic deploy and rollback strictly scoped to explorer/API/indexer
• remove faucet image/schema coupling from the core wait and public-health gate
• align source-controlled wrappers with the verified live protected wrappers
• trigger image publication when core deploy workflow/wrappers change
• record the failed deployment and rollback in the living handoff

The faucet remains untouched and requires its own manual workflow after key rotation, funding approval, and dedicated wrapper activation.

Verification

• inspected failed run logs and confirmed every sample served the expected release SHA after warm-up
• confirmed rollback job passed and public Makalu serves the prior healthy release
• verified live protected wrappers operate only on explorer/API/indexer
• bash -n passed for both source-controlled wrapper scripts
• git diff --check passed
• workflow files parse successfully through Prettier

[github-actions]

Test Results

Package	Passed	Failed	Skipped	Total	Duration
api	no results
indexer	no results
explorer	no results

Coverage

Package	Stmts %	Branch %	Funcs %	Lines %
api	no coverage
indexer	no coverage
explorer	no coverage

_{Generated by ci.yaml for 7eca7f4e560c7e98f45e79d352aab645195f1e64. Test JSON + coverage HTML are uploaded as run artifacts.}