- Remove actions/checkout@v4, shivammathur/setup-php@v2, actions/cache@v3
- Replace with native shell commands (git clone, apt-get, simple file cache)
- Should be much faster (no GitHub Action downloads)
- Eliminates dependency on GitHub for action downloads
- Change composer validate from --strict to --no-check-lock
- Add automatic lock file update attempt
- Prevents workflow failure when lock file is not in sync with composer.json
- Remove all GitHub Actions dependencies (checkout, setup-php, cache, buildx, build-push)
- Replace with native shell commands (git clone, apt-get, docker buildx)
- Eliminate dependency on GitHub for action downloads
- Improve stability and reduce timeout issues
- All functionality preserved, now using direct commands only
- Add deployment/ansible/templates/.env.production.j2 used by secrets playbook
- Enhance deploy-update.yml to read registry creds from vault or CI
- Update production-deploy workflow to pass registry credentials to Ansible
- Remove obsolete GitHub-style workflows under .gitea (conflicted naming)
Why: make the production pipeline executable end-to-end with Ansible and
consistent secrets handling; avoid legacy CI configs interfering.
