sync workflow from repo

.gitea/workflows/deploy.yml

@@ -19,9 +19,13 @@ jobs:
       # Join the compose network so `neo4j:7687` resolves. Override
       # `compass_default` via the COMPASS_NETWORK repo variable if the
       # compose project name differs.
-      network: ${{ vars.COMPASS_NETWORK || 'graph-db_default' }}
+      network: ${{ vars.COMPASS_NETWORK || 'compass_default' }}
+      # act_runner 0.2.11 does NOT interpolate ${{ }} inside container.volumes
+      # — it validates the literal string against valid_volumes before
+      # expression evaluation and silently drops non-matches. Keep this path
+      # hard-coded until gitea/act_runner fixes the ordering.
       volumes:
-        - ${{ vars.COMPASS_SNAPSHOT_DIR || '/var/lib/compass/snapshots' }}:${{ vars.COMPASS_SNAPSHOT_DIR || '/var/lib/compass/snapshots' }}
+        - /var/lib/compass/snapshots:/var/lib/compass/snapshots
     env:
       # Structured graph (7687). These are the ONLY credentials with
       # write access — kept in Gitea repo secrets and never read by
@@ -61,7 +65,9 @@ jobs:
 
       - name: Upload deploy result
         if: always()
-        uses: actions/upload-artifact@v4
+        # v4 requires the GHES Artifacts API v2 that Gitea Actions doesn't
+        # implement yet; pin to v3 which uses the legacy artifact store.
+        uses: actions/upload-artifact@v3
         with:
           name: deploy-result-${{ github.ref_name }}
           path: |