Deploy preview and confirmation

Every deploy should show:

current revision
next revision
pending changes list
rollback deadline

Safe sequence

Open deploy preview.
Validate tunnel and device changes.
Choose confirm-with-timeout.
If confirmation is missed, the previous revision is restored automatically.

Safety note

This path prevents accidental direct fallback and keeps rollback explicit.