#1 Add safe IIS release deployment pipeline

Adds an immutable-release IIS deployment pipeline for webserver-1. - deploys the complete repository while exposing only each release's public/ directory - enables Classic ASP parent paths at the IIS site level - preserves the machine-owned public/web.config and database path - verifies package SHA-256, smoke-tests, and restores the previous physicalPath on failure - keeps migrations explicit and disabled by default - adds dry-run, remote preflight, rollback, and deployment documentation Repository-side checks passed on Linux. Windows PowerShell AST parsing and the live IIS preflight remain required before merge/deployment.