Add admin container image verification in deploy workflow (#5752)

* Add eagle0.net as server name alias

Allows accessing the site via eagle0.net in addition to prod.eagle0.net.

Note: After deploying, run certbot to add eagle0.net to the SSL certificate:
  certbot --nginx -d prod.eagle0.net -d eagle0.net

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* Add admin container image verification in deploy workflow

The admin container was running a stale image after the entrypoint was
changed from /app/admin_server to /app/admin_server_linux_amd64. This
happened because:

1. crane pull + docker load doesn't update the :latest tag locally
2. docker-compose fallback to :latest used the old cached image
3. --force-recreate recreated the container but with the old image

Fixes:
- Tag pulled admin image as :latest after docker load (ensures fallback
  uses correct image)
- Add image digest verification after deploy (fails early if wrong
  image is running)
- Add admin startup verification in deploy-blue-green.sh (catches
  container crashes with helpful logs)

This follows the same pattern used in auth_build.yml for auth service
verification.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

scripts/deploy-blue-green.sh

@@ -317,11 +317,23 @@ main() {
         echo "JFR_SIDECAR_ADDR=jfr-sidecar:8081" >> "${env_file}"
     fi
 
-    # Restart admin to pick up new .env
+    # Restart admin to pick up new .env and ensure latest image
     # Use --no-deps to prevent cascading to auth (which has secrets not available here)
     log_info "Restarting admin service..."
     docker compose -f "${COMPOSE_FILE}" up -d --force-recreate --no-deps admin
 
+    # Verify admin container is running
+    sleep 3
+    if ! docker inspect admin-server --format '{{.State.Running}}' 2>/dev/null | grep -q "true"; then
+        log_error "Admin container failed to start!"
+        log_error "Container logs:"
+        docker logs admin-server --tail 20 2>&1 || true
+        log_error "Container inspect:"
+        docker inspect admin-server 2>&1 | head -50 || true
+        exit 1
+    fi
+    log_info "Admin service restarted successfully"
+
     # Clean up old instance
     log_info "Cleaning up old eagle-${active}..."
     docker compose -f "${COMPOSE_FILE}" rm -f "eagle-${active}" 2>/dev/null || true