Move check/renovate onto brick-build, deploy stays brick-host

Renovate no longer needs Docker access for a one-shot docker-run job:
switched to setup-node + npm install -g renovate (matching labelprint's
workflow), so it fits the same brick-build runner as check instead of
the stale "deploy" label. Also note down the build-log readability/API
gaps flagged from a real failed terrain build.

TODO.adoc

@@ -71,3 +71,12 @@ Deprioritized for now — revisit after the sections above land.
 * [ ] Level gauge from IMU (ESP32/RPi) — camper tilt, wheel-chock leveling calculation
 * [ ] Victron/Home Assistant via MQTT or WebSocket — battery SoC, tank levels, temperatures
 * [ ] Plot GPS track with historical battery/speed data
+
+== Admin / ops tooling
+
+* [ ] Offline build log readability — a failed pmtiles/terrain build currently surfaces as one
+  ~500k-character line; format it for the web UI instead (e.g. per-country/state name + status,
+  not the raw combined stdout/stderr dump)
+* [ ] Expose the build log via an API endpoint, not just embedded in the admin page
+* [ ] Document all API endpoints somewhere and make them easy to browse (status of each) —
+  maybe a status page, login-gated