feat(03-04): Worker [assets] binding + one-command deploy + D-14 build-artifact gate

- wrangler.jsonc assets block serves ../web/dist; run_worker_first keeps /api/* + /telegram/* on the Worker (D-13)
- root npm run deploy = build theme → web → bot wrangler deploy + set-webhook (D-15); dev = build + wrangler dev --port 8787 --local (D-12)
- vite.config.ts dual-build: __ARAHARAH_HARNESS__ define keyed on --mode harness, separate dist/dist-harness outDirs
- main.ts guard unchanged; ambient constant declared once in web/src/vite-env.d.ts
- build-artifact.test.mjs BA1..BA6: zero CDN refs, self-hosted fonts, MapLibre worker, inlined style, no mock installer in ANY emitted file (HTML included)

package.json

@@ -8,7 +8,9 @@
     "web"
   ],
   "scripts": {
-    "build": "npm run build --workspace theme",
+    "build": "npm run build -w theme && npm run build -w web",
+    "deploy": "npm run build && npm run deploy -w bot",
+    "dev": "npm run build && npm run dev -w bot",
     "sheet": "npm run sheet --workspace theme",
     "gallery": "npm run gallery --workspace theme",
     "audit": "npm run audit --workspace theme",
@@ -21,7 +23,8 @@
     "web:test": "npm test -w web",
     "web:typecheck": "npm run typecheck -w web",
     "web:dev": "npm run dev -w web",
-    "web:build": "npm run build -w web",
+    "web:build": "npm run build -w theme && npm run build -w web",
+    "web:build:harness": "npm run build:harness -w web",
     "web:capture": "npm run capture -w web"
   }
 }