Deploy / deploy (push) Successful in 31s
Runs backfill_events using secrets.PORTAL_NATS_URL directly from the CI job's own env (same source deploy.yml's env-write step already uses) - avoids needing a sudo'd terminal session to read /etc/app/uhhm-portal.env's secrets off disk just to run a one-time migration tool. workflow_dispatch only, defaults to dry run. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>