fix(ci): trigger workflow on main branch to enable :latest tag

Changes:
- Create Gitea workflow for ai-stack-deployer
- Trigger on main branch (default branch)
- Use oussamadouhou + REGISTRY_TOKEN for authentication
- Build from ./Dockerfile

This enables :latest tag creation via {{is_default_branch}}.

Tags created:
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:latest
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:<sha>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docker-compose.yml

@@ -0,0 +1,41 @@
+version: "3.8"
+
+# ***NEVER FORGET THE PRINCIPLES***
+services:
+  ai-stack-deployer:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: ai-stack-deployer
+    ports:
+      - "3000:3000"
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - HOST=0.0.0.0
+      - DOKPLOY_URL=${DOKPLOY_URL}
+      - DOKPLOY_API_TOKEN=${DOKPLOY_API_TOKEN}
+      - STACK_DOMAIN_SUFFIX=${STACK_DOMAIN_SUFFIX:-ai.flexinit.nl}
+      - STACK_IMAGE=${STACK_IMAGE:-git.app.flexinit.nl/oussamadouhou/oh-my-opencode-free:latest}
+      - RESERVED_NAMES=${RESERVED_NAMES:-admin,api,www,root,system,test,demo,portal}
+    env_file:
+      - .env
+    restart: unless-stopped
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "bun",
+          "--eval",
+          "fetch('http://localhost:3000/health').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))",
+        ]
+      interval: 30s
+      timeout: 3s
+      retries: 3
+      start_period: 5s
+    networks:
+      - ai-stack-network
+
+networks:
+  ai-stack-network:
+    driver: bridge