feat(core,run-engine): expose a deployment's external id on the run context

A run knew its version but not the --external-id it was deployed under, so it
could not tell whether it was the deployment a version skew protection pin
currently names. A version cannot answer that: the pin is an opaque string and
nothing maps one to the other.

The deployment row is already fully selected and SWR-cached where the run context
is built, so this adds no query.

Author: 0ski

internal-packages/run-engine/src/engine/systems/runAttemptSystem.ts

@@ -2008,6 +2008,7 @@ export class RunAttemptSystem {
         runtime: worker.deployment.runtime ?? "unknown",
         runtimeVersion: worker.deployment.runtimeVersion ?? "unknown",
         git: safeParseGitMeta(worker.deployment.git),
+        externalId: worker.deployment.externalId ?? undefined,
       };
     });
 

packages/core/src/v3/schemas/common.ts

@@ -340,6 +340,12 @@ export const TaskRunExecutionDeployment = z.object({
   runtime: z.string(),
   runtimeVersion: z.string(),
   git: GitMeta.optional(),
+  /**
+   * The `--external-id` this deployment was deployed under. Lets a run tell whether
+   * it is the deployment a version-skew pin currently names, which a version alone
+   * cannot answer.
+   */
+  externalId: z.string().optional(),
 });
 
 export type TaskRunExecutionDeployment = z.infer<typeof TaskRunExecutionDeployment>;