docs(runtime): mark DeploymentExecutor jarPath as Task-11 bridge

Tactical filesystem-path read of the AppVersion locator survives until the
loader init-container lands — flagged inline so future readers don't read
the staging step as steady state.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

cameleer-server-app/src/main/java/com/cameleer/server/app/runtime/DeploymentExecutor.java

@@ -134,6 +134,9 @@ public class DeploymentExecutor {
         try {
             App app = appService.getById(deployment.appId());
             Environment env = envService.getById(deployment.environmentId());
+            // TODO Task 11: replace with signed download URL via ArtifactDownloadController.
+            //   This leaks the filesystem locator out of ArtifactStore — tactical bridge until
+            //   the loader-init-container pattern lands.
             String jarPath = appService.getVersion(deployment.appVersionId()).jarPath();
             String generation = generationOf(deployment);