fix(cd): unblock dependent deploy jobs on Gitea

.gitea/workflows/cd.yaml

@@ -312,6 +312,11 @@ jobs:
     # 2026-04-30 Codex: Docker builds run on the host runner. Long docker build
     # steps were killing the transient act job container with RWLayer=nil.
     needs: tests
+    # 2026-06-27 Codex: Gitea 1.25 can leave dependent jobs as
+    # "Blocked by required conditions" after tests succeed when relying on the
+    # implicit success() condition. Make the dependency result explicit so the
+    # latest runtime fixes actually deploy while still failing closed on tests.
+    if: ${{ needs.tests.result == 'success' }}
     timeout-minutes: 60
     runs-on: awoooi-host
     steps:
@@ -1218,6 +1223,9 @@ jobs:
 
   post-deploy-checks:
     needs: build-and-deploy
+    # Keep post-deploy tied to a real build/deploy success instead of the
+    # implicit condition that can be misreported as blocked in Gitea.
+    if: ${{ needs.build-and-deploy.result == 'success' }}
     timeout-minutes: 30
     # 2026-04-30 Codex: keep post-deploy on the host runner too. Playwright
     # install-deps can also kill the act-managed job container with RWLayer=nil.

apps/api/.cd-trigger

@@ -1 +1 @@
-# 2026-06-27 ai-automation-runtime-closure deploy trigger after blocked CD job
+# 2026-06-27 explicit Gitea needs-result deploy trigger for AI automation closure