Adopt published deployment storage and compressed backup fixes

ReviewOS now consumes published SDK 0.75.407 and cloud 0.16.91 through its normal manifest and lockfile. The live API and web sites both point to 3e057f9; the installed API packages are 0.75.407/0.16.91. The standalone Mac runner’s recorded source revision is the same full commit.

• Consume the maintained cloud storage package. The live host helper’s SHA-256 exactly matches the helper generated by published 0.16.91: ba34c48ebbbb114d318cec1e4e03f40bd64b1bc6410b4ca13051d74a0bd90610. Upstream rollout: https://github.com/stacksjs/ts-cloud/issues/204.
• Consume the compressed-backup SDK and verify restore behavior. An integrity-verified npm archive of Buddy 0.75.407 was exercised against an owned loopback PostgreSQL 17.10 cluster: streamed gzip backup, no partial file, restore into a distinct database, exact Unicode/numeric/JSON row equality, and retention across legacy SQL/new gzip files. The fixture cluster and package extraction were stopped/removed afterward. Production databases were not used for this test.
• Complete normal CI/deployment and verify live state. Exact-source CI succeeded: https://github.com/ReviewOS/reviewos.org/actions/runs/41359311675. Both /var/www/reviewos-api/current and /var/www/reviewos-reviewos/current resolve to 3e057f9. Seven completed gzip database backups are retained outside release trees, latest 2026-11-01T23-20-43-585.postgres.sql.gz. No active backup or migration operation was interrupted.

The original source backup fix is https://github.com/stacksjs/stacks/issues/3079. Artifact matrix acceptance remains separate under https://github.com/ReviewOS/reviewos.org/issues/13; enterprise native acceptance and customer launch remain under https://github.com/stacksjs/hq.training/issues/376 and https://github.com/stacksjs/hq.training/issues/346.

Published cloud 0.16.89 is now consumed by source https://github.com/ReviewOS/reviewos.org/commit/925b713bc0f644abd3ec6fcc6e965b2fdfe03b53, in both the direct pin and existing override. Normal install, full type checking, Pickier (3572 files, zero findings) and all 49 deployment/queue/key/configuration tests passed. Normal CI/deployment: https://github.com/ReviewOS/reviewos.org/actions/runs/41100694146.

The prior artifact controller revision passed PostgreSQL 7022 tests (2 skips) and MySQL 7008 tests (16 skips), with zero failures. Its required database backup stopped activation on ENOSPC. Safe cleanup preserved all completed data, recovered about 69 GB on the deployment volume, and the normal failed deployment was retried once. That retry currently waits on the compute-storage lock held by an apply operation, which is waiting for the active host backup. Both operations remain intact.

SDK 0.75.384 is tagged/pushed through normal release:patch and awaits its exact-source main CI and publisher. Compressed-backup consumer adoption remains pending that publication; no dependency patch, backup skip or safety-lock removal is involved.