Release v0.1.3 — deployment artifacts + review fixes · NovaLux12/carelink-bridge

Deployment artifacts (the v0.1.3 phase from ROADMAP.md)

deploy/systemd/carelink-bridge.service — hardened user-level systemd unit (#6)
deploy/install.sh — idempotent install/update script (#6)
deploy/nightscout-docker-compose.yml — Nightscout + MongoDB + cloudflared stack (#6)
deploy/README.md — full deployment runbook (#6)

Pump timezone offset now rounds to the nearest 15 minutes, not whole hours (#20, fixes #15). Previously, users in half/quarter-hour timezones (+05:30 India, +09:30 central Australia, +05:45 Nepal, −03:30 Newfoundland) had every SGV timestamp skewed by up to 30 minutes. ⚠️ Behaviour change: pump clocks off by more than 7.5 minutes are no longer silently rounded away — set the pump clock accurately.
systemd ReadWritePaths is now directory-level (#19, fixes #16). The previous per-file bind mounts would have silently blocked the stale-token recovery path (deleting logindata.json on refresh-token expiry). Needs on-host verification — see #16's checklist.
Version/docs sync (#18, fixes #17): package.json now matches the release tag, CONTRIBUTING's Node matrix matches CI (20/22), and a maintainer release checklist prevents recurrence.

No new dependencies. 33/33 tests passing on Node 20 + 22; the suite is verified timezone-independent (run under UTC, Asia/Kolkata, America/St_Johns).
Real-data validation against a live 780G is still pending (#12). Nothing in this release has been tested against a real CareLink account.