ci: add TestFlight release pipeline and workflow improvements

.gitea/workflows/deploy.yaml

@@ -19,14 +19,18 @@ on:
 #              Header: x-api-key: <token>
 #   Response on success: HTTP 200, body: [{"result":{"data":{"json":{...}}}}]
 
+concurrency:
+  group: ${{ gitea.workflow }}-${{ gitea.ref }}
+  cancel-in-progress: true
+
 jobs:
   # ── production deploy (main/master only) ─────────────────────────────────────
   deploy-production:
     name: Deploy Production
     runs-on: ubuntu-latest
     if: >
-      github.event_name == 'push' &&
-      (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master')
+      gitea.event_name == 'push' &&
+      (gitea.ref == 'refs/heads/main' || gitea.ref == 'refs/heads/master')
     steps:
       - name: Redeploy production stack
         run: |
@@ -46,15 +50,15 @@ jobs:
     name: Deploy Preview
     runs-on: ubuntu-latest
     if: >
-      github.event_name == 'push' &&
-      github.ref != 'refs/heads/main' &&
-      github.ref != 'refs/heads/master'
+      gitea.event_name == 'push' &&
+      gitea.ref != 'refs/heads/main' &&
+      gitea.ref != 'refs/heads/master'
     steps:
       - name: Sanitize branch name
         id: branch
         run: |
           # Lowercase, replace non-alphanumeric with dashes, strip trailing dashes, max 20 chars
-          SUFFIX=$(echo "${{ github.ref_name }}" \
+          SUFFIX=$(echo "${{ gitea.ref_name }}" \
             | tr '[:upper:]' '[:lower:]' \
             | sed 's/[^a-z0-9]/-/g' \
             | cut -c1-20 \
@@ -81,12 +85,12 @@ jobs:
   cleanup-preview:
     name: Cleanup Preview
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && github.event.action == 'closed'
+    if: gitea.event_name == 'pull_request' && gitea.event.action == 'closed'
     steps:
       - name: Sanitize branch name
         id: branch
         run: |
-          SUFFIX=$(echo "${{ github.head_ref }}" \
+          SUFFIX=$(echo "${{ gitea.head_ref }}" \
             | tr '[:upper:]' '[:lower:]' \
             | sed 's/[^a-z0-9]/-/g' \
             | cut -c1-20 \