fix(ci): verify via public HTTPS (follow 301); add build marker for round-trip test

.gitea/workflows/deploy.yml

@@ -62,12 +62,16 @@ jobs:
       - name: Verify live
         run: |
           set -euo pipefail
+          # Hit the public HTTPS endpoint and follow the :80 -> :443 redirect.
+          # -L follows redirects; we assert the FINAL status is 200.
           code=$(ssh -i ~/.ssh/id_deploy -o IdentitiesOnly=yes \
             "${DEPLOY_USER}@${DEPLOY_HOST}" \
-            "curl -s -o /dev/null -w '%{http_code}' http://localhost/ -H 'Host: plate-software.de'")
-          echo "Local origin HTTP $code"
-          [ "$code" = "200" ] || { echo "❌ unexpected status"; exit 1; }
-          echo "✅ plate-software.de serving HTTP 200"
+            "curl -sL -o /dev/null -w '%{http_code}' https://plate-software.de/")
+          echo "plate-software.de final HTTP $code"
+          case "$code" in
+            200) echo "✅ plate-software.de serving HTTP 200" ;;
+            *)   echo "❌ unexpected status $code"; exit 1 ;;
+          esac
 
       - name: Summary
         run: |