CI: build and push admin-ui image in CI; deploy-ift SSH-only.

Move docker build/push from deploy-ift to CI (EventHubBack pattern).
Deploy no longer needs docker.sock on the WSL runner.
Add ensure-docker-daemon.sh for Docker Desktop on host runner.

.gitea/workflows/deploy-ift.yml

@@ -11,23 +11,14 @@ concurrency:
   group: eventhub-frontadmin-deploy-ift
   cancel-in-progress: false
 
-env:
-  REGISTRY: git.sabilin.com/eventhub
-  BUILDKIT_PROGRESS: quiet
-  DOCKER_BUILDKIT: 1
-
 jobs:
   deploy-ift-admin:
     if: |
       github.event_name == 'workflow_dispatch' ||
       (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
     runs-on: ubuntu-latest
-    timeout-minutes: 90
+    timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
-        with:
-          ref: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}
-
       - name: Compute image tag
         id: meta
         run: |
@@ -39,60 +30,6 @@ jobs:
           fi
           echo "tag=sha-${SHA:0:12}" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - run: npm ci
-      - run: npm run build
-
-      - name: Wait for Docker daemon
-        run: |
-          set -euo pipefail
-          for i in $(seq 1 36); do
-            if docker info >/dev/null 2>&1; then
-              echo "Docker ready"
-              exit 0
-            fi
-            echo "waiting for docker (${i}/36)..."
-            sleep 5
-          done
-          echo "Docker daemon not available"
-          exit 1
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to registry
-        uses: docker/login-action@v2
-        with:
-          registry: git.sabilin.com
-          username: ${{ secrets.REGISTRY_USER }}
-          password: ${{ secrets.REGISTRY_PASSWORD }}
-
-      - name: Build admin-ui image
-        run: |
-          set -euo pipefail
-          bash scripts/retry-docker-build.sh 5 60 -- \
-            docker buildx build \
-              --network=host \
-              --file Dockerfile \
-              --tag eventhub-admin-ui:local \
-              --load \
-              --provenance=false \
-              --sbom=false \
-              .
-
-      - name: Push admin-ui image
-        run: |
-          set -euo pipefail
-          TAG="${{ steps.meta.outputs.tag }}"
-          docker tag eventhub-admin-ui:local "${REGISTRY}/eventhub-admin-ui:${TAG}"
-          docker tag eventhub-admin-ui:local "${REGISTRY}/eventhub-admin-ui:ift"
-          bash scripts/retry-docker-build.sh 5 30 -- docker push "${REGISTRY}/eventhub-admin-ui:${TAG}"
-          bash scripts/retry-docker-build.sh 5 30 -- docker push "${REGISTRY}/eventhub-admin-ui:ift"
-
       - name: Deploy admin on IFT via SSH
         uses: appleboy/ssh-action@v0.1.5
         with: