feat: скаффолд Astro 5 SSG (главная + /privacy + consent gate)

- Главная: hero, адрес Люблинская 100 (Аквапарк ФЭНТАЗИ), 4 кликабельных tel:, карта Яндекса
- /privacy: политика 152-ФЗ + ConsentRevoke (отозвать/сбросить)
- Аналитика перенесена 1:1 с WP: Яндекс.Метрика 47169531 (Webvisor) + GA4 GT-WRF7ZZ8
- Скрипты в type=text/plain, активируются после согласия (pit-consent в localStorage+cookie)
- robots.txt с явным Allow для GPTBot/ClaudeBot/PerplexityBot/Google-Extended/CCBot
- llms.txt + ai.txt (spawning.ai стандарт)
- IndexNow ключ 901a779d62ca4702ad810c863b45e1f7
- JSON-LD AutoPartsStore с адресом и 4 телефонами
- nginx:1.29-alpine runtime, контейнер на :4147
- Gitea Actions deploy.yml + Trivy scan + IndexNow ping

.gitea/workflows/deploy.yml

@@ -0,0 +1,75 @@
+name: deploy
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install SSH client
+        run: |
+          apt-get update -qq
+          apt-get install -y --no-install-recommends openssh-client
+
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh && chmod 700 ~/.ssh
+          printf '%s\n' "${{ secrets.SSH_DEPLOY_KEY }}" > ~/.ssh/id_deploy
+          chmod 600 ~/.ssh/id_deploy
+          printf '%s\n' "${{ secrets.SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
+          chmod 644 ~/.ssh/known_hosts
+
+      - name: Deploy + Trivy scan to web.hhivp.com
+        run: |
+          ssh -i ~/.ssh/id_deploy striker@web.hhivp.com bash -s <<'REMOTE'
+          set -euo pipefail
+          REPO_URL="ssh://git@git.striker.su:2222/striker/pitstopavto-su-v2.git"
+          DEPLOY_PATH="/opt/docker/sites/pitstopavto-su-v2"
+          HEALTH_URL="http://127.0.0.1:4147/"
+
+          if [ ! -d "$DEPLOY_PATH/.git" ]; then
+            mkdir -p "$DEPLOY_PATH"
+            git clone --branch main "$REPO_URL" "$DEPLOY_PATH"
+          else
+            cd "$DEPLOY_PATH"
+            git remote set-url origin "$REPO_URL"
+            git fetch origin main
+            git reset --hard origin/main
+          fi
+
+          cd "$DEPLOY_PATH"
+          docker compose build
+
+          echo "=== Trivy scan: pitstopavto-su-v2:latest ==="
+          docker run --rm \
+            -v /var/run/docker.sock:/var/run/docker.sock \
+            -v /tmp/trivy-cache:/root/.cache/ \
+            ghcr.io/aquasecurity/trivy:latest image \
+            --severity HIGH,CRITICAL \
+            --ignore-unfixed \
+            --no-progress \
+            --exit-code 0 \
+            --timeout 5m \
+            pitstopavto-su-v2:latest || true
+          echo "=== Trivy scan done ==="
+
+          docker compose up -d
+          sleep 5
+          docker compose ps
+          curl -fsS -o /dev/null -w "HEALTH HTTP %{http_code}\n" "$HEALTH_URL"
+          docker image prune -af --filter "until=168h" >/dev/null 2>&1 || true
+          REMOTE
+
+      - name: Setup Node.js for IndexNow
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Notify IndexNow
+        run: npm run indexnow || true