[GH-P4] Checks API, statuts, GitHub Deployments + relance sur le SHA demandé

apps/server/src/db.rs

@@ -1057,6 +1057,14 @@ pub async fn migrate_github_app(pool: &PgPool) -> Result<(), sqlx::Error> {
     ] {
         sqlx::query(sql).execute(pool).await?;
     }
+    // P4 : liens GitHub (Check Run / Deployment) par déploiement DevForge.
+    for sql in [
+        "ALTER TABLE deployments ADD COLUMN check_run_id BIGINT",
+        "ALTER TABLE deployments ADD COLUMN github_deployment_id BIGINT",
+        "ALTER TABLE deployments ADD COLUMN github_head_sha TEXT",
+    ] {
+        let _ = sqlx::query(sql).execute(pool).await;
+    }
     // P3 : observabilité des livraisons webhook app-level.
     for sql in [
         "ALTER TABLE github_webhook_deliveries ADD COLUMN duration_ms BIGINT",

apps/server/src/dev_env.rs

@@ -589,6 +589,7 @@ pub(crate) async fn run_dev_deploy(
         is_static: project.is_static != 0,
         github_token: deploy_tok.token,
         github_token_ephemeral: deploy_tok.ephemeral,
+        pin_sha: None,
         env_file,
         proxy_labels: Some(labels),
         gpu_nvidia: project.gpu_nvidia != 0,

apps/server/src/github_app_events.rs

@@ -300,6 +300,7 @@ pub fn rerequest_as_push(event: &str, payload: &Value) -> Option<Value> {
         "repository": payload.get("repository")?,
         "installation": payload.get("installation"),
         "head_commit": { "id": sha, "message": "Relance demandée depuis GitHub" },
+        "devforge_pin_sha": sha,
     }))
 }