deploy.sh looked for Go only on the PATH, which the webhook's systemd service does not extend to /usr/local/go/bin, so every deploy skipped the build. It now also checks Go's usual install folders and GO_BIN, and reports a skipped or failed build instead of hiding it. A new build is installed only after webhook-server --check passes; the replaced one is kept as webhook-server.previous. The running webhook then starts the new build in its own process when no deploy is queued, so no sudo restart rule is needed, and the restart deploy.sh used to attempt, which would have stopped the deploy running it, is gone. A webhook built before this change needs one manual restart. See deployment/webhook/README.md.
Fixed the deploy webhook never being rebuilt
Deploys now find Go outside the service's PATH, install a new webhook build only after it passes --check, and the webhook starts that build itself once its queue is empty.