- rename .gitea/workflows/build.yml top-level name from "publish" to "build" - remove workflow_dispatch inputs and deploy/promote jobs from build.yml - add new .gitea/workflows/deploy.yml containing: - workflow_dispatch input "sha" - promote-and-deploy job (podman login, promote/push, logout, failure notification) - deploy job (write kubeconfig, rollout restart/status, failure notification)