fix: justfile shebang recipes indentation (spaces → tabs)

TODO.md

@@ -2,6 +2,8 @@
 
 ## Completed
 
+- [x] Fix `just serve` — justfile shebang recipes (`deploy-env`, `reencrypt-password`) used space indentation instead of tabs, causing "extra leading whitespace" parse error
+
 - [x] PDF 100 MB limit + bentopdf mention
   - [x] `ThesisCreateController`: `MAX_PDF_SIZE = 100 MB`; PDFs checked against it, other files still 500 MB
   - [x] `ThesisEditController`: same per-PDF limit applied

justfile

@@ -68,9 +68,9 @@ deploy:
 
 [group('deploy')]
 deploy-env:
-    # Upload app/.env only if it exists locally; never overwrites a remote .env that already has APP_KEY.
 	#!/usr/bin/env bash
 	set -euo pipefail
+	# Upload app/.env only if it exists locally; never overwrites a remote .env that already has APP_KEY.
 	if [ ! -f app/.env ]; then
 		echo "WARNING: app/.env not found locally — skipping."
 		exit 0
@@ -86,13 +86,13 @@ deploy-env:
 
 [group('deploy')]
 reencrypt-password new_key_b64="":
+	#!/usr/bin/env bash
+	set -euo pipefail
 	# Re-encrypt the SMTP password in the remote DB after rotating APP_KEY.
 	# Usage:
 	#   1. Generate a new key:  php -r "echo base64_encode(random_bytes(32));"
 	#   2. Run:                 just reencrypt-password <new_base64_key>
 	#   3. Update app/.env locally with the new key, then run: just deploy-env
-    #!/usr/bin/env bash
-    set -euo pipefail
 	if [ -z "{{new_key_b64}}" ]; then
 		echo "Usage: just reencrypt-password <new_base64_key>"
 		echo "Generate a key: php -r \"echo base64_encode(random_bytes(32));\""