feat(deploy): token-gated internal deployment-config fetch endpoint

src/ZB.MOM.WW.ScadaBridge.Host/Program.cs

@@ -369,6 +369,10 @@ try
         // Basic-Auth + LDAP mechanism as /management; gated on the OperationalAudit
         // / AuditExport role sets.
         app.MapAuditAPI();
+        // Notify-and-fetch deploy (#2/#3): site-facing token-gated fetch of a staged
+        // deployment's flattened config. Machine-to-machine — AllowAnonymous, gated
+        // solely by the per-deployment X-Deployment-Token (no central FallbackPolicy).
+        app.MapDeploymentConfigAPI();
         app.MapHub<ZB.MOM.WW.ScadaBridge.ManagementService.DebugStreamHub>("/hubs/debug-stream");
 
         // Compile and register all Inbound API method scripts at startup