A manual deploy.sh run without a SHA resolved the local 'main' first, which lags behind origin/main in the deploy checkout, and redeployed the old commit. Resolve <remote>/<ref> first and fall back to the ref itself for SHAs and tags. Claude-Session: https://claude.ai/code/session_01YMUEBB4pr4TtGSMhEAKonM Co-authored-by: Claude <noreply@anthropic.com>