fix: remove sudo from deploy script, use docker compose directly

deploy user has no sudo for systemctl. Instead:
- Use 'docker compose up -d --force-recreate' to recreate the web
  container without needing systemctl
- Change Restart=always so systemd re-attaches after the container
  is recreated
- Replace 'sudo journalctl' with 'docker compose logs' in error path

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

deploy/sum-nohype.service

@@ -13,7 +13,7 @@ ExecStartPre=docker compose -f docker-compose.prod.yml pull --ignore-pull-failur
 ExecStart=docker compose -f docker-compose.prod.yml up --build
 ExecStop=docker compose -f docker-compose.prod.yml down
 
-Restart=on-failure
+Restart=always
 RestartSec=10
 TimeoutStartSec=300
 TimeoutStopSec=30