The service was up but the site was down: a missing Traefik route
romm.example.net returned a 404 while RomM itself was running fine. The service was healthy, DNS resolved, and the reverse proxy simply had no route for it. Here is the diagnostic path and why "committed" is not "deployed."