Switches from git pull --ff-only to git fetch + git reset --hard origin/main to avoid failing when VPS has uncommitted local changes to tracked files (apps/ml-service/Dockerfile, docker-compose.yml). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>