feat: enforce deployment environment preflight

scripts/rollback-production.sh

@@ -3,6 +3,16 @@ set -eu
 
 : "${RELEASE_TAG:?Set RELEASE_TAG to the previously deployed immutable image tag}"
 
+production_env_file=${PRODUCTION_ENV_FILE:-.env}
+if [ ! -f "$production_env_file" ]; then
+	printf '%s\n' "Production environment file not found: $production_env_file" >&2
+	exit 1
+fi
+set -a
+. "$production_env_file"
+set +a
+./scripts/validate-production-env.sh
+
 export IMAGE_TAG="$RELEASE_TAG"
 docker compose -f compose.production.yaml up -d --wait api worker web
 docker compose -f compose.production.yaml ps