Fix deploy_server.sh: correct Docker image URLs and add token validation

[Copilot]

📋 Summary

Production deployments fail because deploy_server.sh references the upstream ghcr.io/polarsource/polar image paths, while the build step pushes to ghcr.io/exzosverse-os/exzos-pay. Additionally, an empty RENDER_API_TOKEN produces silent failures with no useful diagnostics.

🎯 What

• Fix Docker image URLs in deploy_server.sh to match the actual build output
• Add early RENDER_API_TOKEN validation
• Include HTTP status codes in deployment error messages

🤔 Why

The CI logs show both srv-ci4r87h8g3ne0dmvvl60 and srv-d4k6otfgi27c73cicnpg returning empty responses with no HTTP status context. Two issues:

1. Wrong image registry path — the script tells Render to pull from ghcr.io/polarsource/polar which doesn't match the pushed image at ghcr.io/exzosverse-os/exzos-pay
2. Empty API token — the RENDER_API_TOKEN secret appears unset (logs show blank value instead of ***), and the script has no guard for this

🔧 How

-IMG="ghcr.io/polarsource/polar@${1}"
+IMG="ghcr.io/exzosverse-os/exzos-pay@${1}"

-PLAYWRIGHT_IMG="ghcr.io/polarsource/polar-playwright@${PLAYWRIGHT_DIGEST}"
+PLAYWRIGHT_IMG="ghcr.io/exzosverse-os/exzos-pay-playwright@${PLAYWRIGHT_DIGEST}"

• Added fail-fast check for empty RENDER_API_TOKEN before any curl calls
• Added -w "\n%{http_code}" to the deploy curl call so failures report e.g. (HTTP 401) or (HTTP 404) instead of blank output

⚠️ External action required: The RENDER_API_TOKEN secret must be set/verified in the repo's GitHub Actions secrets.

🧪 Testing

• I have tested these changes locally
• All existing tests pass (uv run task test for backend, pnpm test for frontend)
• I have added new tests for new functionality
• I have run linting and type checking (uv run task lint && uv run task lint_types for backend)

Test Instructions

1. Verify image URLs match between deploy.yml build step and deploy_server.sh
2. Confirm RENDER_API_TOKEN is set in repo secrets, then re-run the deploy workflow

🖼️ Screenshots/Recordings

N/A — CI/CD workflow change only.

📝 Additional Notes

Ran shellcheck — all warnings are pre-existing (nameref false positives, local assignment style). No new warnings introduced.

✅ Pre-submission Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my code
• I have commented my code where necessary
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have updated the relevant tests
• All tests pass locally
• AI/LLM Policy: If I used AI assistance, I have tested and executed the code locally (not just "vibe-coded")

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
exzos-pay	Canceled		Feb 23, 2026 9:15am

[Copilot]

Pull request overview

This PR fixes critical deployment failures in deploy_server.sh caused by incorrect Docker image registry paths and lack of API token validation. The script was referencing the upstream ghcr.io/polarsource/polar images while the build workflow pushes to ghcr.io/exzosverse-os/exzos-pay.

Changes:

• Updated Docker image URLs to match the actual build output (ghcr.io/exzosverse-os/exzos-pay and ghcr.io/exzosverse-os/exzos-pay-playwright)
• Added early validation for RENDER_API_TOKEN to fail fast with a clear error message
• Enhanced error reporting by capturing and displaying HTTP status codes in deployment failure messages

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.