feat(deployment): update semaphore configuration and deployment workflows

deployment/stacks/traefik/dynamic/semaphore.yml

@@ -0,0 +1,18 @@
+http:
+  routers:
+    semaphore:
+      rule: Host(`semaphore.michaelschiemer.de`)
+      entrypoints:
+        - websecure
+      service: semaphore
+      tls:
+        certResolver: letsencrypt
+      priority: 100
+  services:
+    semaphore:
+      loadBalancer:
+        # Use localhost port binding since Semaphore binds to 127.0.0.1
+        # Check actual port with: docker ps | grep semaphore
+        # Default is 3001, but may be 9300 if SEMAPHORE_PORT env var is set differently
+        servers:
+          - url: http://127.0.0.1:3001