Browser extension: detect and subscribe to standard.site publications on ATProto substandard.blog

fix(deploy): verify the task definition image before running #599

targeting main from claude/pano-deploy-verify
Merged opened by and assigned to affine-nimcha.test.pds.did.bot
targeting main from claude/pano-deploy-verify
After `tofu apply`, resolve the latest ACTIVE task definition by family and wait until its container image tag is the commit just built. If it is still a previous revision after 20 seconds, fail before `run-task`. This closes the window where the apply has finished but the task starts on the old revision, which silently runs the previous image for the entire crawl. `bash -n` and `prek` pass. No application image change.
Commits 1

fix(deploy): verify the task definition image before running