- add gitea actions workflow to build and deploy on push to main - authorize CI deploy key for root SSH on desktop - workflow unlocks git-crypt, builds yarn config, deploys if desktop reachable