ONCE with Green

Use the bundled green launcher in the deployment directory. It runs with Babashka and resolves immutable package dependencies. Read configuration.md before changing desired state. Read github-deploy.md when adding continuous deployment to an application's repository.

DMARC management is opt-in through smtp-dmarc-policy; see the configuration reference for provider restrictions, reporting addresses, existing-record import, and preserving a DNS record when removing management. Review any inherited policy before setting an explicit sending-domain policy.

The package calls colors-compute for one host. The library owns provider selection, credentials, node state and encrypted SSH resources. ONCE owns the workflow scope and agent lifetime. Update its dependency to obtain provider support; do not add a compute template or provider branch to this package. ONCE owns application configuration, SMTP, DNS and GitHub publishing.