Consolidate services; pipeline edits

.woodpecker/deploy.yaml

@@ -1,5 +1,13 @@
 # Deploy: build image, push to registry, trigger Portainer stack redeploy.
 # Runs on push/tag/manual to main only, after ci workflow succeeds.
+# no need to clone, we're just pinging a webhook
+skip_clone: true
+
+# Use writable workspace when clone is skipped (no root clone step to create /woodpecker/src)
+workspace:
+    base: /tmp
+    path: deploy
+
 when:
     - branch: main
       event: [push, tag, manual]