Targets: build, deploy, down, wait-ssh, ssh, ansible, verify, up, lint, fmt, check 'up' runs the full pipeline: build → deploy → wait → install → verify Separate verify.yml playbook for running health checks independently Note: requires gnumake (nix-shell -p gnumake)