docs(deploy): keep the research record out of the app Space

The Space carried 460 files / 250 MB, of which 260 files / 31 MB were eval
reports the app never reads. They are already public in this repo; an app Space
that also hosts the research record is wasteful and easy to mistake for dataset
hosting. Exclude eval/reports/ from the publish set and assert it in the deploy
self-test, so removing the rule fails the gate instead of passing silently.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: JuliaEdom

DEPLOY.md

@@ -15,11 +15,17 @@ The deploy script itself (`.deploy_hf.py`) is repo-local (it reads a local token
 and Mistral key by path) and is intentionally not committed. It:
 
 1. computes the file set from `git ls-files` minus a publish-exclude list
-   (`tests/`, `.github/`, `docs/research/`, `reviews/`, `eval/baselines/`);
+   (`tests/`, `.github/`, `docs/research/`, `reviews/`, `eval/baselines/`,
+   `eval/reports/`);
 2. drops anything the hygiene detector flags;
 3. uploads via `huggingface_hub`, then prunes remote files no longer present;
 4. supports `--self-test` (a gate that runs before upload) and `--dry-run`.
 
+The Space hosts the **app**, not the research record. Eval reports and baselines are
+260 files / 31 MB the app never reads; they stay in this repo, which is public, and are
+excluded from the upload set. `--self-test` asserts that exclusion and fails if it is
+removed, so the rule is executable rather than a comment.
+
 ## What ships to the Space
 
 The Space is **SQLite-only** — `psycopg` is pruned from its `requirements.txt`, so