Retarget deploy pipeline to POS and guard against cross-service clobber

The pipeline was copied from Ladill Mini and still deployed into
/var/www/ladill-mini, so the first POS push overwrote mini.ladill.com.
Retarget every mini reference to pos (app root, archive/workspace names,
concurrency group, nginx subdomain, supervisor worker), add a guard step
that fails the run unless basename(LADILL_APP_ROOT) matches the repo name,
and document the incident + a forking checklist in DEPLOY.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

deploy/deploy.sh

@@ -2,7 +2,7 @@
 # Fast on-host release deploy (same model as climpme/web/deploy/deploy.sh).
 set -Eeuo pipefail
 
-APP_ROOT="${LADILL_APP_ROOT:-/var/www/ladill-mini}"
+APP_ROOT="${LADILL_APP_ROOT:-/var/www/ladill-pos}"
 RELEASES_DIR="$APP_ROOT/releases"
 SHARED_DIR="$APP_ROOT/shared"
 CURRENT_LINK="$APP_ROOT/current"
@@ -236,7 +236,7 @@ if [ -L "$CURRENT_LINK" ] && [ -f "$CURRENT_LINK/artisan" ]; then
   (cd "$CURRENT_LINK" && php artisan queue:restart) || true
 fi
 if command -v supervisorctl >/dev/null 2>&1; then
-  supervisorctl restart ladill-mini-worker:* 2>/dev/null || true
+  supervisorctl restart ladill-pos-worker:* 2>/dev/null || true
 fi
 
 log "Cleaning old releases"