Generic host/repo/branch-aware CD on adnanh/webhook

Replaces the per-project deploy scripts and self-contained webhook
receivers with one manifest-driven implementation that lives outside the
application repositories and can be updated independently of them.

First targets: domaindingo test and prod on s5.

docs/active-context.md

@@ -0,0 +1,17 @@
+# Active context — knowledge routing index
+
+Index of this project's knowledge-base entries. Read an entry **only when your
+current task matches its trigger** — never preemptively. When an instruction has
+been fully implemented and is no longer needed, delete its line. (An ai-context
+update may re-add it; if it's still done, just delete it again.)
+
+## Entries
+
+- Working style — code/tool checklist, math/arithmetic options → `ai-context/style/working-style.md`
+- Repository operations — Gitea project, `tea` usage, branch/PR flow, remote dev
+  bind addresses, package-manager notes → `docs/project-knowledge-base.md`
+- Gitea workflow — branch flow (`main → test → dev → feature`) and posting comments/PRs with `tea` → `ai-context/infrastructure/git-instructions.md`
+- Gitea CI on a rootless-Docker runner — Playwright/Buildx, socket mount errors → `ai-context/infrastructure/rootless-docker-gitea-runner.md`
+- Publishing public releases to a separate GitHub repo → `ai-context/infrastructure/gitea-to-github-release.md`
+- Uploading build artifacts to Cloudflare R2 from CI → `ai-context/services/cloudflare-r2.md`
+- CI success/failure notifications via ntfy → `ai-context/services/ntfy.md`