t-266.11
First service migration: add worker to manifest, deploy via bild --deploy, verify it starts via deployer, disable NixOS-managed worker service. Document migration pattern.