Release DeployBot v0.2.13 with stale-handoff protection

[mberman84]

Summary

• refresh durable pipeline state before telling a source thread to unpause
• allow an already-authorized deploy to resume the exact repaired release without another user round trip
• bind pause/resume controls to release heads and control IDs so stale or concurrent recovery cannot steal ownership
• release the change as v0.2.13 and pin privileged consumers to the reviewed runtime commit

Verification

• PYTHONPATH=src python3 -m pytest -q (199 passed, 201 subtests)
• python3 -m ruff check .
• autoreview clean