It's that simple to allow one of your Linux users to run a single command as UID 0:
sudo visudo
/usr/bin/bundle
deploy ALL=NOPASSWD: /usr/bin/bundle