Build and push images to the private registry, then deploy to the VPS by commit SHA with health check and rollback.