Deploy gateway sources from GitHub archive

[Pigbibi]

Summary

• deploy source from the GitHub runner as an archive instead of running git fetch/clone on the VM
• avoid private-repository credential prompts on gateway VMs
• document that VMs do not need GitHub credentials for deploy
• update workflow assertions for archive-based deploy

Verification

• python3 -m py_compile 2fa_bot.py
• bash tests/test_install_2fa_bot_watcher.sh
• bash tests/test_wait_for_ib_gateway_ready.sh
• bash tests/test_workflow_shared_config.sh
• bash tests/test_docker_compose_ports.sh
• git diff --check

Runtime config

• updated IB_GATEWAY_TARGETS_JSON so u15998061 uses the ubuntu VM user

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8dfbbf8692

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Normalize deploy path before deleting it

When DEPLOY_PATH is misconfigured with an equivalent form such as /opt/ or /home/, it bypasses this exact-match guard and the next line runs sudo rm -rf on that directory, deleting the VM's /opt or /home contents before recreating the deploy directory. Since this change adds the destructive removal step, normalize the path or reject slash/dot variants before allowing the delete.

Useful? React with 👍 / 👎.