feat: manual deploy-app workflow for apps/ with build support

Add workflow_dispatch-only deploy-app action, deploy-app.sh script,
apps/_template for Cursor, and SOUL/README split between static
webhook deploy and app compose profiles.

Co-authored-by: Cursor <cursoragent@cursor.com>

hooks/deploy.sh

@@ -1,4 +1,6 @@
 #!/usr/bin/env bash
+# Static deploy only: git pull for public/ and repo files.
+# App build/deploy: .gitea/workflows/deploy-app.yml (workflow_dispatch).
 set -euo pipefail
 
 REPO_DIR="/repo"