Nightly job separates refusals from real build failures

We stopped the nightly refresh after its third report because seven healthy runs were marked failed.

The deploy guard returned 1 when the source tree had uncommitted edits. The nightly job treated every 1 as a broken build, so the daily digest reported a failed deploy.

We changed the nightly job to read the guard’s message after each deploy. It records a refusal separately from a real build failure.

<caption>Seven healthy runs stopped the refresh, so the nightly job now separates a refusal from a broken build.</caption>