add deploy creation

DEPLOYMENT_FILES.md

@@ -0,0 +1,34 @@
+# Deployment Files
+
+The hosting deployment is built by `scripts/build-deploy-artifact.sh` into `build/deploy/`.
+
+Included:
+
+- `app/`
+- `bootstrap/`
+- `public/`
+- `routes/`
+- `vendor/`
+- `composer.json`
+- `composer.lock`
+- `spark`
+- `preload.php`
+- `writable/.htaccess`
+- `writable/index.html`
+- `writable/.gitkeep`
+- `writable/*/.gitkeep`
+- `writable/tcpdf_fonts/`
+
+Excluded:
+
+- `.git/`
+- `.gitea/`
+- `.env` and local env backups
+- `tests/`
+- `Database_Dump/`
+- `build/` except the generated deploy artifact during CI
+- documentation/planning files
+- local scripts that are not needed at runtime
+- runtime cache, logs, sessions, uploads, and generated reports
+
+The server keeps its own `.env` and runtime `writable/` contents. The deploy job syncs from `build/deploy/` and excludes mutable writable subdirectories so production data is not overwritten.