ONCE with Red

Use the bundled red launcher in the deployment directory. It runs with Bun and resolves immutable package dependencies. Read configuration.md before changing desired state. Read github-deploy.md when adding continuous deployment to an application's repository.

The package calls colors-compute for one host. The library owns provider selection, credentials, remote state and SSH key lifecycle. Update its dependency to obtain provider support; do not add a compute template or provider branch to this package. ONCE owns application configuration, SMTP, DNS and GitHub publishing.

Keep secrets in COLORS_PAR_* environment variables. Ask for variable names and whether they are set, never their values. Do not read .envrc.private or private keys. Never read generated .colors/ as source or edit it. Use one color at a time for a deployment.