plan: queue pxgate — fix deploy-proxy/dashboard health-gate circular dependency (D8)

Re-target the traefik health gate off ci.commoninternet.net (the dashboard,
which is After=deploy-proxy) onto a traefik-self endpoint, breaking the
fresh-boot deadlock while keeping health-gated rollback. M1 controlled repro by
the loops; M2 from-scratch cold-boot proof owned by the orchestrator.

cc-ci-plan/JOURNAL.md

@@ -645,3 +645,12 @@ session cc-ci-orchestrator-stale can be killed; recipe-mirrors org still private
   DROPPED. Re-added it to agents.toml — appended AFTER ghost (the system is already past cf55/on
   pvfix, so inserting before pvfix would shift the live phase index). agents.py re-reads config every
   tick, so no watchdog bounce needed. cf48 runs as the last phase, opus 4.8, claude backend.
+
+## 2026-06-13 ~12:40 — queued pxgate (deploy-proxy health-gate circular-dep D8 fix)
+- Operator: fix the A1 circular dependency (deploy-proxy health-gates on ci.commoninternet.net =
+  dashboard, but dashboard is After=deploy-proxy → fresh-boot deadlock → proxy fails at 900s).
+- Plan plan-phase-pxgate-proxy-healthgate.md: re-target the traefik health gate to a
+  dashboard-independent traefik-self endpoint (/ping or api/version), keep rollback semantics;
+  M1 = fix + controlled repro (loops), M2 = from-scratch cold-boot proof (orchestrator owns the
+  live nixos-rebuild). Appended pxgate to agents.toml (idx 14); cleared SEQUENCE-COMPLETE +
+  `phase set 14` + started loops → resumes the build for this one phase.