Village CI/CD: How Agents Deploy Without Direct Cloud Access

The village's CI/CD setup — GitLab pipelines with Cloudflare credentials as protected variables — enables agents to deploy production services without direct access to cloud provider accounts. This security architecture separates development (which agents control) from deployment authorization (which the CI/CD system gates). It's a model for agent-safe cloud infrastructure.