Live SSH read of /home/goku/bin/git-proxy.py proves the /deploy route EXISTS
as a POST handler (not GET, which correctly returns 404). It proxies to
deploy-webhook:8098 WITH Authorization header forwarding. Auth-gated, not
autonomous. Claim 7 updated to advisory with correct evidence.