fix(ci): trigger workflow on main branch to enable :latest tag

Changes:
- Create Gitea workflow for ai-stack-deployer
- Trigger on main branch (default branch)
- Use oussamadouhou + REGISTRY_TOKEN for authentication
- Build from ./Dockerfile

This enables :latest tag creation via {{is_default_branch}}.

Tags created:
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:latest
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:<sha>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docs/LOGIC_VALIDATION.md

@@ -0,0 +1,86 @@
+# Logic Validation Report
+**Date**: 2026-01-09
+**Project**: AI Stack Deployer
+
+## Requirements vs Implementation
+
+### Core Requirement
+Deploy user AI stacks via Dokploy API when users provide a valid stack name.
+
+### Expected Flow
+1. User provides stack name (3-20 chars, alphanumeric + hyphens)
+2. System validates name (format, reserved words, availability)
+3. System creates Dokploy project: `ai-stack-{name}`
+4. System creates Docker application with OpenCode image
+5. System configures domain: `{name}.ai.flexinit.nl` (HTTPS via Traefik wildcard SSL)
+6. System triggers deployment
+7. User receives URL to access their stack
+
+### Implementation Review
+
+#### ✅ Name Validation (`src/index.ts:33-58`)
+- Length: 3-20 characters ✓
+- Format: lowercase alphanumeric + hyphens ✓
+- No leading/trailing hyphens ✓
+- Reserved names check ✓
+- **Status**: CORRECT
+
+#### ✅ API Client Authentication (`src/api/dokploy.ts:75`)
+- Uses `x-api-key` header (correct for Dokploy API) ✓
+- **Status**: CORRECT (fixed from Bearer token)
+
+#### ✅ Deployment Orchestration (`src/index.ts:61-140`)
+**Step 1**: Create/Find Project
+- Searches for existing project first ✓
+- Creates only if not found ✓
+- **Status**: CORRECT
+
+**Step 2**: Create Application
+- Uses correct project ID ✓
+- Passes Docker image ✓
+- Creates application with proper naming ✓
+- **Issue**: Parameters may not match API expectations (validation failing)
+- **Status**: NEEDS INVESTIGATION
+
+**Step 3**: Domain Configuration
+- Hostname: `{name}.ai.flexinit.nl` ✓
+- HTTPS enabled ✓
+- Port: 8080 ✓
+- **Status**: CORRECT
+
+**Step 4**: Trigger Deployment
+- Calls `deployApplication(applicationId)` ✓
+- **Status**: CORRECT
+
+#### ⚠️ Identified Issues
+
+1. **Application Creation Parameters**
+   - Location: `src/api/dokploy.ts:117-129`
+   - Issue: API returns "Input validation failed"
+   - Root Cause: Unknown - API expects different parameters or format
+   - Impact: Blocks deployment at step 2
+
+2. **Missing Error Recovery**
+   - No cleanup on partial failure
+   - Orphaned resources if deployment fails mid-way
+   - Impact: Resource leaks, name conflicts on retry
+
+3. **No Idempotency Guarantees**
+   - Project creation is idempotent (searches first)
+   - Application creation is NOT idempotent
+   - Domain creation has no duplicate check
+   - Impact: Multiple clicks could create duplicate resources
+
+### Logic Validation Conclusion
+
+**Core Logic**: SOUND - The flow matches requirements
+**Implementation**: MOSTLY CORRECT with one blocking issue
+
+**Blocking Issue**: Application.create API call validation failure
+- Need to determine correct API parameters
+- Requires API documentation or successful example
+
+**Recommendation**:
+1. Investigate application.create API requirements via Swagger UI
+2. Add comprehensive error handling and cleanup
+3. Implement idempotency checks for all operations