ci: unify check and production deploy into one workflow

Co-authored-by: Cursor <[email protected]>

src/lib/ci-workflow-contract.test.ts

@@ -8,18 +8,27 @@ describe("CI workflow", () => {
 		"utf8",
 	);
 
-	it("only runs check (lint/typecheck/test), not production deploy", () => {
+	it("runs check then production deploy on push to main", () => {
 		expect(workflow).toContain("pnpm biome:lint");
 		expect(workflow).toContain("pnpm typecheck");
 		expect(workflow).toContain("pnpm test");
-		expect(workflow).not.toMatch(/\n\s*deploy:\s*\n/);
-		expect(workflow).not.toContain("pm2 restart");
-		expect(workflow).not.toContain("pm2 start");
+		expect(workflow).toContain("needs: check");
+		expect(workflow).toContain(
+			"gitea.event_name == 'push' && gitea.ref_name == 'main'",
+		);
+		expect(workflow).toContain("worktree add --detach");
+		expect(workflow).toContain("/api/health");
 		expect(workflow).not.toContain("github.ref");
 	});
 
-	it("uses Gitea SHA for checkout", () => {
+	it("uses Gitea SHA for check checkout", () => {
 		expect(workflow).toContain("gitea.sha");
 		expect(workflow).toContain("SKIP_ENV_VALIDATION=1");
 	});
+
+	it("keeps tag release in the same workflow", () => {
+		expect(workflow).toContain('tags:\n      - "v*"');
+		expect(workflow).toContain("Creating release for");
+		expect(workflow).toContain("startsWith(gitea.ref_name, 'v')");
+	});
 });