feat(deploy): autodeploy off unless AUTODEPLOY=true

Pushes no longer reach the cluster by default; set the AUTODEPLOY repo variable to 'true' to re-enable, or dispatch manually. Skips propagate through the existing needs chain.

.gitea/workflows/deploy.yaml

@@ -39,12 +39,12 @@ env:
 
 jobs:
   preflight:
-    # Kill-switch for autodeploy: set the AUTODEPLOY repo variable to 'false'
+    # Autodeploy defaults to OFF: pushes deploy only when the AUTODEPLOY repo
-    # (Settings -> Actions -> Variables) and pushes stop reaching the cluster
+    # variable is set to 'true' (Settings -> Actions -> Variables). A manual
-    # with no commit. Unset means on. A manual Run workflow always bypasses
+    # Run workflow always bypasses the switch: dispatching it is the explicit
-    # the switch: dispatching it is the explicit intent to deploy.
+    # intent to deploy.
     if: >-
-      (vars.AUTODEPLOY != 'false' || github.event_name == 'workflow_dispatch') &&
+      (vars.AUTODEPLOY == 'true' || github.event_name == 'workflow_dispatch') &&
       (github.event_name != 'workflow_run' ||
       (github.event.workflow_run.conclusion == 'success' &&
        github.event.workflow_run.head_branch == 'main'))