feat(release): prepare 1.1.0 candidate

.forgejo/workflows/deploy-site.yml

@@ -3,9 +3,6 @@ name: deploy-site
 on:
   push:
     branches: [main]
-    tags: ["v*"]
-  release:
-    types: [published]
   workflow_dispatch:
 
 jobs:
@@ -26,9 +23,9 @@ jobs:
 
       - name: 의존성 설치 및 사이트 빌드
         run: |
-          npm ci --prefix site || npm install --prefix site
+          npm ci --prefix site
           npm run build --prefix site
-          node scripts/ci/sync-and-publish-forgejo-release.mjs || true
+          node -e "const fs=require('node:fs'); const v=require('./release/product-version.json').version; fs.writeFileSync('site/dist/release-identity.json', JSON.stringify({commit:process.env.GITHUB_SHA,version:v},null,2)+'\n')"
 
       - name: Cloudflare Pages 배포 (d3ro.chanpaca.net)
         env:
@@ -46,5 +43,17 @@ jobs:
               --branch main \
               --commit-dirty=true
           else
-            echo "CLOUDFLARE_API_TOKEN 없음"
+            echo "CLOUDFLARE_API_TOKEN 없음" >&2
+            exit 1
           fi
+
+      - name: 공개 배포 식별자 검증
+        run: |
+          curl --fail --silent --show-error --retry 6 --retry-delay 5 \
+            https://d3ro.chanpaca.net/release-identity.json \
+            --output release-identity.live.json
+          node -e "const fs=require('node:fs'); const live=JSON.parse(fs.readFileSync('release-identity.live.json','utf8')); if(live.commit!==process.env.GITHUB_SHA) throw new Error('public commit mismatch'); const expected=require('./release/product-version.json').version; if(live.version!==expected) throw new Error('public version mismatch')"
+          curl --fail --silent --show-error https://d3ro.chanpaca.net/ --output /dev/null
+          curl --fail --silent --show-error https://d3ro.chanpaca.net/privacy/ --output /dev/null
+          curl --fail --silent --show-error https://d3ro.chanpaca.net/terms/ --output /dev/null
+          curl --fail --silent --show-error https://d3ro.chanpaca.net/delete-account/ --output /dev/null