feat(server): complete phase 6 local verification

deploy/cosmic-clash-server

@@ -0,0 +1,6 @@
+#!/usr/bin/env sh
+# Native and container launcher for the dedicated export. Its server boot scene
+# is baked into the dedicated artifact during the Docker export stage.
+set -eu
+
+exec "$(dirname "$0")/CosmicClashServer.x86_64" --headless -- "$@"

deploy/cosmic-clash-server.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Cosmic Clash dedicated server
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=cosmicclash
+WorkingDirectory=/opt/cosmic-clash
+ExecStart=/opt/cosmic-clash/cosmic-clash-server --config=/etc/cosmic-clash/server.cfg
+Restart=on-failure
+RestartSec=5
+NoNewPrivileges=true
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target