Add an extension for when a user requests a deployment

There is a decision of whether to put this before or after the permissions check.
I opted for after, since of the potential security implications.
A safe default saves peoples lives.
Ah, right! Would passing in `$data` alone be enough, or should I have a conditional to run a different extension point with different parameters?

What do you think is best to do here?