fix(ci): resolve 3 Gitea Actions pipeline failures

- Remove upload-artifact step (unsupported on Gitea GHES)
- Replace architecture+audit jobs with unified validate job running validate_all.py
- Update docs: DEPLOY_HOST must be 172.17.0.1 (Docker bridge), not 127.0.0.1
- Add ufw rule for Docker bridge network SSH access

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -76,7 +76,7 @@ jobs:
       - name: Run tests
         run: python -m pytest tests/ -v --tb=short
 
-  architecture:
+  validate:
     runs-on: ubuntu-latest
     env:
       DATABASE_URL: "postgresql://dummy:dummy@localhost:5432/dummy"
@@ -94,8 +94,8 @@ jobs:
       - name: Install dependencies
         run: uv pip install --system -r requirements.txt
 
-      - name: Validate architecture
-        run: python scripts/validate/validate_architecture.py
+      - name: Run all validators
+        run: python scripts/validate/validate_all.py
 
   # ---------------------------------------------------------------------------
   # Security (non-blocking)
@@ -116,32 +116,13 @@ jobs:
       - name: Run pip-audit
         run: pip-audit --requirement requirements.txt || true
 
-  audit:
-    runs-on: ubuntu-latest
-    continue-on-error: true
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
-        with:
-          python-version: ${{ env.PYTHON_VERSION }}
-
-      - name: Install uv
-        run: pip install uv
-
-      - name: Install dependencies
-        run: uv pip install --system -r requirements.txt -r requirements-dev.txt
-
-      - name: Run audit
-        run: python scripts/validate/validate_audit.py
-
   # ---------------------------------------------------------------------------
   # Build (docs - only on push to master)
   # ---------------------------------------------------------------------------
   docs:
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
-    needs: [ruff, pytest, architecture]
+    needs: [ruff, pytest, validate]
     steps:
       - uses: actions/checkout@v4
 
@@ -158,19 +139,13 @@ jobs:
       - name: Build docs
         run: mkdocs build
 
-      - name: Upload docs artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: docs-site
-          path: site/
-
   # ---------------------------------------------------------------------------
-  # Deploy (master-only, after lint + tests + architecture pass)
+  # Deploy (master-only, after lint + tests + validate pass)
   # ---------------------------------------------------------------------------
   deploy:
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
-    needs: [ruff, pytest, architecture]
+    needs: [ruff, pytest, validate]
     steps:
       - name: Deploy to production
         uses: appleboy/ssh-action@v1