Adds `make prod` (no --reload) as the service entrypoint, mirrors the worker unit under deploy/, and splits the makefile service targets into `worker-*` / `web-*` with the install scaffolding factored into a macro.
