fix: support host storage paths and clean up cancelled deployments

Allow validated host file and directory mounts outside resource directories
while protecting external paths from deletion.

Clean up cancelled deployment containers and clear tracked process IDs.
Preserve legacy KeyDB and Dragonfly password parsing, accept server backup
paths without extension restrictions, and allow Compose variable proxy ports.

database/migrations/2026_10_05_064824_add_is_pull_request_to_github_runner_executions_table.php

@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('github_runner_executions', function (Blueprint $table) {
+            $table->boolean('is_pull_request')->default(false)->after('labels');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('github_runner_executions', function (Blueprint $table) {
+            $table->dropColumn('is_pull_request');
+        });
+    }
+};

database/migrations/2026_10_05_064841_close_legacy_enqueued_scheduled_job_deliveries.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    /**
+     * ScheduledJobDeliveryService::ENQUEUED_STALE_AFTER_MINUTES when this migration was written.
+     */
+    private const STALE_AFTER_MINUTES = 60;
+
+    /**
+     * v4.3.23 left dropped overlapping jobs enqueued; stale recovery would report them as missed runs.
+     */
+    public function up(): void
+    {
+        DB::table('scheduled_job_deliveries')
+            ->where('status', 'enqueued')
+            ->where('enqueued_at', '<', now()->subMinutes(self::STALE_AFTER_MINUTES))
+            ->update([
+                'status' => 'skipped',
+                'updated_at' => now(),
+            ]);
+    }
+
+    public function down(): void
+    {
+        //
+    }
+};