fix(deploy): add optional Turnstile and customer mTLS proxy

test/static-check.sh

@@ -17,7 +17,10 @@ test -f compose/e.yml
 test -f config/e-server.production.yaml
 test -f s-migrations.tar.gz
 test "$(find s-migrations -type f -name '*.up.sql' | wc -l)" -gt 0
+sha256sum -c SHA256SUMS >/dev/null
 ! rg -n '^([[:space:]]*)build:' compose
 ! rg -n 'overcooked-auth|overcooked-auth-webui' compose install.sh
+! rg -n 'S_TURNSTILE_(SITE|SECRET)_KEY: .*\\?required' compose
+! rg -n 'S_INTERNAL_TLS_(ADDR|CERT_FILE|KEY_FILE|CLIENT_CA_FILE)' compose install.sh
+rg -n 'control-proxy|PRODUCT_E_CONTROL_PLANE_TLS_' compose install.sh >/dev/null
 echo 'static customer installer checks passed'
-