Deploy backend; app uses the deployed Worker !12

Stacked on !11 (targets m4-system).

• Deployed moonrise-server (https://moonrise-server.audit-labs.workers.dev): D1 created and both migrations applied remotely; crons */5 and */10; APNS_KEY secret set from the .p8 (not stored in the repo).
• wrangler.jsonc: real D1 id.
• Optional LL2_API_KEY secret. The first production LL2 poll got HTTP 429: the anonymous limit is per IP and Workers share egress IPs.
• App: Debug and Release point at the deployed Worker.

Verified in production: /healthz 200; SWPC cron stored a snapshot and /v1/today serves Kp; invalid device registration returns 400. Launches are empty until an LL2 key is set. node --test: 10 pass.