fix: add ob-shell and org-confirm-babel-evaluate to tangle-deploy block in infrastructure.org

The tangle-deploy.sh is tangled FROM infrastructure.org, but the org
block was missing (require 'ob-shell) and org-confirm-babel-evaluate nil.
This caused the CrowdSec noweb block (sh src) to evaluate as nil,
making crowdsecLapiKey = nil in dynamic.yaml and blocking ALL traffic
through the CrowdSec bouncer with 403.

Fix the org block so the system is self-consistent: tangle always
produces a correct tangle-deploy.sh that can load ob-shell and
evaluate noweb blocks without confirmation prompts.

infrastructure.org

@@ -73,7 +73,8 @@ fi
 echo "=== Tangling $ORG_FILE ==="
 emacs --batch -Q --load /usr/share/emacs/28.2/lisp/org/org-loaddefs.el \
   --eval "(require 'org)" \
-  --eval "(org-babel-tangle-file \"$ORG_FILE\")" 2>&1
+  --eval "(require 'ob-shell)" \
+  --eval '(let ((org-confirm-babel-evaluate nil)) (org-babel-tangle-file "'"$ORG_FILE"'"))' 2>&1
 echo "=== Restarting services ==="
 cd /docker/compose
 if [ -f /docker/appdata/traefik/traefik.yaml ] || \