feat(module/deploy): CLI deploy verb — record version from code + deploy

Add `mirrorstack module deploy`: the module's code is the source of truth.
Deploy reads the newest `Config.Versions` key out of main.go, records that
version (immutable snapshot + manifest) when it isn't recorded yet, then
points it at a Lambda invoke target — one developer verb, publish merged in.

- api: record_module_version / list_module_versions / set_module_deploy /
  get_tunnel_manifest, with platform error-envelope surfacing.
- module_meta: parse + SemVer-rank the Versions map keys, promote a
  `-dev` key in-place at deploy time.
- README + CHANGELOG captured as locale maps ({default, <tag>}), each read
  off disk at the module root and version-section respectively.
- scaffold/template: reword publish→deploy; `-dev` refused under --yes.

Pairs with the api-platform module_deploys writer (already merged, #284).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: I-am-nothing