feat(deployment): add manual deploy workflow and update semaphore configuration

deployment/stacks/semaphore/docker-compose.yml

@@ -54,9 +54,8 @@ services:
       - "traefik.http.routers.semaphore-secure.tls=true"
       - "traefik.http.routers.semaphore-secure.tls.certresolver=letsencrypt"
       - "traefik.http.routers.semaphore-secure.service=semaphore"
-      # Service definition (use container IP in host network mode)
-      - "traefik.http.services.semaphore.loadbalancer.server.scheme=http"
-      - "traefik.http.services.semaphore.loadbalancer.server.port=3000"
+      # Service definition (use localhost port binding)
+      # Note: Dynamic config in traefik/dynamic/semaphore.yml takes precedence
     environment:
       - TZ=Europe/Berlin
       # Database Configuration

deployment/stacks/traefik/dynamic/semaphore.yml

@@ -12,7 +12,6 @@ http:
     semaphore:
       loadBalancer:
         # Use localhost port binding since Semaphore binds to 127.0.0.1
-        # Check actual port with: docker ps | grep semaphore
-        # Default is 3001, but may be 9300 if SEMAPHORE_PORT env var is set differently
+        # Port is configured via SEMAPHORE_PORT in .env (currently 9300)
         servers:
-          - url: http://127.0.0.1:3001
+          - url: http://127.0.0.1:9300