Snapshot is written by DeploymentExecutor before the RUNNING/DEGRADED split, so DEGRADED rows already carry a deployed_config_snapshot. Treat them as checkpoints — partial-healthy deploys still produced a working config worth restoring. Aligns repo query with UI filter. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>