fix: pipeline CI/CD — vps-runner direct deploy (pm2 + rsync)

Remplace le flow Docker (docker compose up) par le vrai modèle :
- Job unique sur vps-runner (runner local sur le VPS)
- Build backend → rsync vers /var/www/originsdigital/backend/ → pm2 restart
- Build frontend avec VITE_API_URL/VITE_SUPEROAUTH_URL → rsync vers /var/www/originsdigital/frontend/dist/
- Suppression appleboy/ssh-action (inutile, le runner est sur le VPS)

.gitea/workflows/deploy.yml

@@ -7,9 +7,9 @@ on:
     branches: [main]
 
 jobs:
-  build:
+  build-and-deploy:
-    name: Build
+    name: Build & Deploy
-    runs-on: ubuntu-latest
+    runs-on: vps-runner
     steps:
       - uses: actions/checkout@v4
 
@@ -21,31 +21,36 @@ jobs:
             backend/package-lock.json
             frontend/package-lock.json
 
+      # ── Backend ──────────────────────────────────────────────────────────────
       - name: Install & build backend
         working-directory: backend
         run: |
           npm ci
           npm run build
 
+      - name: Deploy backend
+        run: |
+          mkdir -p /var/www/originsdigital/backend
+          rsync -a --delete backend/dist/ /var/www/originsdigital/backend/dist/
+          rsync -a backend/package.json backend/package-lock.json /var/www/originsdigital/backend/
+          cd /var/www/originsdigital/backend && npm ci --omit=dev
+
+      - name: Restart pm2
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        run: pm2 restart originsdigital-backend || pm2 start /var/www/originsdigital/backend/dist/index.js --name originsdigital-backend
+
+      # ── Frontend ─────────────────────────────────────────────────────────────
       - name: Install & build frontend
         working-directory: frontend
+        env:
+          VITE_API_URL: ${{ secrets.VITE_API_URL }}
+          VITE_SUPEROAUTH_URL: ${{ secrets.VITE_SUPEROAUTH_URL }}
         run: |
           npm ci
           npm run build
 
-  deploy:
+      - name: Deploy frontend
-    name: Deploy to VPS
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
+        run: |
-    needs: build
+          mkdir -p /var/www/originsdigital/frontend/dist
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+          rsync -a --delete frontend/dist/ /var/www/originsdigital/frontend/dist/
-    steps:
-      - name: Deploy via SSH
-        uses: appleboy/ssh-action@v1
-        with:
-          host: ${{ secrets.SSH_HOST }}
-          username: ${{ secrets.SSH_USER }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          script: |
-            cd /home/tetardtek/github/originsdigital
-            git pull origin main
-            docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d --build