fix: complete deployment release gates

.github/workflows/deployment.yml

@@ -5,6 +5,12 @@ on:
   push:
     branches: [main]
   workflow_dispatch:
+    inputs:
+      windows_docker_startup:
+        description: Run the native self-hosted Windows Docker Desktop/WSL2 release gate
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: read
@@ -60,16 +66,18 @@ jobs:
   linux-docker:
     name: Linux Docker deployment and rollback
     runs-on: ubuntu-24.04
-    timeout-minutes: 70
+    timeout-minutes: 100
     steps:
       - name: Check out source
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Run unified deployment smoke
-        run: timeout --signal=TERM --kill-after=45s 30m bash scripts/unified-deployment-smoke.sh
+        run: timeout --signal=TERM --kill-after=45s 32m bash scripts/unified-deployment-smoke.sh
       - name: Run thothctl update smoke
-        run: timeout --signal=TERM --kill-after=45s 30m bash scripts/thothctl-update-smoke.sh
+        run: timeout --signal=TERM --kill-after=45s 32m bash scripts/thothctl-update-smoke.sh
+      - name: Run Linux server deployment smoke
+        run: timeout --signal=TERM --kill-after=45s 32m bash scripts/server-deployment-smoke.sh
 
   windows-clone:
     name: Windows clone and Compose contract
@@ -85,14 +93,25 @@ jobs:
         with:
           go-version: "1.26.5"
           cache-dependency-path: tools/thothctl/go.sum
-      - name: Build native Windows thothctl
-        working-directory: tools/thothctl
-        shell: pwsh
-        run: |
-          New-Item -ItemType Directory -Force -Path ../../dist/thothctl | Out-Null
-          go build -trimpath -o ../../dist/thothctl/thothctl-windows-amd64.exe ./cmd/thothctl
       - name: Verify Windows clone contract
         shell: pwsh
-        run: >-
-          ./scripts/test-windows-clone-contract.ps1
-          -ThothctlPath "$PWD/dist/thothctl/thothctl-windows-amd64.exe"
+        run: ./scripts/test-windows-clone-contract.ps1
+
+  windows-docker-release:
+    name: Native Windows Docker Desktop/WSL2 startup
+    if: github.event_name == 'workflow_dispatch' && inputs.windows_docker_startup
+    runs-on: [self-hosted, Windows, X64, docker-desktop]
+    timeout-minutes: 45
+    steps:
+      - name: Check out source
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Set up Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        with:
+          go-version: "1.26.5"
+          cache-dependency-path: tools/thothctl/go.sum
+      - name: Run spaced-path Windows Docker release gate
+        shell: pwsh
+        run: ./scripts/test-windows-clone-contract.ps1 -DockerStartup