The host-mode runner does a clean checkout without the git-ignored
deploy/.env.staging, so regenerate it from Actions secrets
(STAGING_POSTGRES_PASSWORD / STAGING_GOOGLE_CLIENT_ID / STAGING_GOOGLE_CLIENT_SECRET)
at deploy time. Drop the duplicate host build+test — 'docker compose --build'
compiles the API image in-container and CI already gates tests on the PR.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Real CI at .gitea/workflows/ci.yml (Gitea reads .gitea/workflows, not the empty
untracked .git/workflows/ci.yml cruft): backend dotnet build + dotnet test (39 tests)
and frontend npm ci + build, on pushes to main/develop and all PRs. Establishes the
merge gate recommended in the Phase 7 git-workflow review.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>