feat: package atomic reversible nginx releases

scripts/deploy/rollback-release.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+
+if [[ $# -lt 1 ]]; then
+  echo 'Usage: rollback-release.sh <dedicated-root> ...' >&2
+  exit 64
+fi
+release_root=$1
+if [[ "$release_root" != /* || "$release_root" == / || ! -f "$release_root/.portfolio-release-root" ]]; then
+  echo 'Release root must be an explicit dedicated directory with a valid sentinel.' >&2
+  exit 65
+fi
+script_dir=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)
+exec node "$script_dir/rollback-release.mjs" "$@"