Fixes for deployment and Nginx config

.woodpecker/deploy.yml

@@ -1,8 +1,10 @@
 # Deploy: build image, push to registry, trigger Portainer stack redeploy.
 # Runs on push/tag/manual to main only, after ci workflow succeeds.
 when:
-    branch: main
+    - branch: main
       event: [push, tag, manual]
+    - event: deployment
+      evaluate: 'CI_PIPELINE_DEPLOY_TARGET == "production"'
 
 depends_on:
     - ci

nginx/snippets/cache-rules.conf

@@ -38,11 +38,7 @@ location ~* \.(pdf|doc|docx)$ {
     access_log off;
 }
 
-# robots.txt: short cache (1 day)
-location = /robots.txt {
-    add_header Cache-Control "public, max-age=86400";
-    access_log off;
-}
+# robots.txt and sitemap.xml: handled in default.conf with alias (variant-specific)
 
 # favicon: long cache (30 days)
 location = /favicon.svg {