[deploy-plugin DPB-24] deploy-cloudflare (workers variant) + Story 1

[rickylabs]

Part of #892 (RFC #891; corpus .llm/runs/plan-deploy-plugin--seed/ r5).

Wrangler wrap: emitted wrangler.jsonc + Web-standard worker entry over ServiceApp.fetch; workers-variant manifest (sagas rejected, kv:atomic unsupported, long-running-process unsupported); suggestedCells flow toward a containers cell via the injected ContainerBuildPort; Story-1 scaffold assets. Anti-scope: CF Queues consumption is leaf territory; one compute variant per target declaration (DP-3 §5, L-7).

Acceptance

• gate: ships only behind a CF-PROBE pass
• gate: plan rejects isolate-exceeding graphs with suggestedCells
• gate: conformance cells for every claimed verdict

Metadata

Dependencies: DPB-20, DPB-23
Delivery shape: probe-gated adapter