Full Gitea Actions CI/CD with cPanel git deployment

- CI workflow: PHP lint, security scan, schema validation
- Deploy workflow: SSH -> cPanel git push + WP REST API fallback + verify
- Sync workflow: cPanel sync + Nextcloud artifact upload
- Health workflow: every 30min plugin health check
- Scripts: verify-deploy, deploy-report, check-namespace, health-check, setup-secrets
- README with full architecture documentation
- Gitea Actions runner registered on Docker Swarm (contabo-swarm-runner)

.gitea/scripts/verify-deploy.py

@@ -0,0 +1,30 @@
+#!/usr/bin/env python3
+"""Verify Hermes cPanel Agent deployment and REST API availability."""
+import json, sys, os
+
+def check_plugins():
+    """Verify plugin is installed and active via WP REST API."""
+    try:
+        data = json.load(sys.stdin)
+    except json.JSONDecodeError:
+        return False, "Cannot parse WP REST API response"
+
+    if isinstance(data, dict) and "code" in data:
+        return False, f"WP API error: {data.get('message', str(data))}"
+
+    if not isinstance(data, list):
+        return False, f"Unexpected response: {type(data).__name__}"
+
+    for p in data:
+        if isinstance(p, dict) and p.get("textdomain") == "hermes-ai-bridge":
+            status = p.get("status", "unknown")
+            name = p.get("name", "?")
+            ver = p.get("version", "?")
+            return True, f"OK: {name} v{ver} status={status}"
+
+    return False, "Plugin not found in WP plugins list"
+
+if __name__ == "__main__":
+    ok, msg = check_plugins()
+    print(msg)
+    sys.exit(0 if ok else 1)