Finish deployment-path slice

[TacoRocket]

Summary

• complete the deployment-path Task 5 and Task 6 follow-through work
• tighten deployment-path Task 8 automation target mapping and supporting evidence
• harden exact target parsing, key vault joins, and deployment-path coverage

Validation

• python3 -m ruff check src/azurefox/chains/deployment_path.py src/azurefox/chains/runner.py src/azurefox/target_matching.py src/azurefox/collectors/provider.py tests/test_cli_smoke.py tests/test_collectors.py tests/test_deployment_path_admissibility.py
• python3 -m pytest -q tests/test_deployment_path_admissibility.py
• python3 -m pytest -q tests/test_collectors.py -k "devops_structured_target_clues or devops_pipeline_summary_extracts_structured"
• python3 -m pytest -q tests/test_cli_smoke.py -k deployment_path
• python3 -m pytest -q tests/test_terminal_ux.py -k deployment_chains
• pre-push guardrail: 346 passed, 2 deselected