ci(release): dispatch deploy.yml on release

GitHub disables workflow re-triggering for GITHUB_TOKEN pushes (the release
commit), so the push trigger in deploy.yml never runs for release commits.
This adds @semantic-release/exec successCmd -> .semrel/dispatch.mjs which
dispatches deploy.yml for every released version, completing the auto loop:
fix/feat -> semantic-release bump -> release commit+tag -> deploy.

.releaserc.json

@@ -12,7 +12,8 @@
     [
       "@semantic-release/exec",
       {
-        "prepareCmd": "node ./.semrel/prepare.mjs '${nextRelease.version}' && bunx biome check package.json flake.nix CHANGELOG.md 2>/dev/null || true"
+        "prepareCmd": "node ./.semrel/prepare.mjs '${nextRelease.version}' && bunx biome check package.json flake.nix CHANGELOG.md 2>/dev/null || true",
+        "successCmd": "node ./.semrel/dispatch.mjs '${nextRelease.version}'"
       }
     ],
     [

.semrel/dispatch.mjs

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+/**
+ * successCmd hook for semantic-release: dispatch the deploy workflow so the
+ * freshly released version is built and deployed to the VPS.
+ *
+ * GitHub disables workflow re-triggering for pushes made by GITHUB_TOKEN
+ * (which is what @semantic-release/git uses to commit the release), so the
+ * plain `push: branches: [main]` trigger in deploy.yml never fires for the
+ * release commit. We dispatch deploy.yml explicitly instead.
+ */
+
+const version = (process.argv[2] || '').trim();
+
+async function main() {
+  const token = process.env.GITHUB_TOKEN;
+  if (!token) {
+    console.error('dispatch.mjs: GITHUB_TOKEN not set, skipping deploy dispatch');
+    process.exit(0);
+  }
+  if (!version) {
+    console.error('dispatch.mjs: no version argument, skipping');
+    process.exit(0);
+  }
+
+  const repo = process.env.GITHUB_REPOSITORY || 'asepharyana/TeleUploader';
+  const url = `https://api.github.com/repos/${repo}/actions/workflows/deploy.yml/dispatches`;
+
+  // dispatch with branch ref main; deploy builds #teleuploader from the
+  // release commit whose package.json/flake.nix already carry `version`
+  const res = await fetch(url, {
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${token}`,
+      'Content-Type': 'application/json',
+      'User-Agent': 'semantic-release-dispatch',
+    },
+    body: JSON.stringify({ ref: 'main' }),
+  });
+
+  if (res.status === 204) {
+    console.log(`dispatch.mjs: dispatched deploy for v${version} to ${repo} main`);
+  } else {
+    const body = await res.text().catch(() => '');
+    console.error(`dispatch.mjs: deploy dispatch failed (HTTP ${res.status}): ${body}`);
+    // Non-fatal: a user can still run the deploy workflow manually.
+    process.exit(0);
+  }
+}
+
+main().catch((err) => {
+  console.error('dispatch.mjs: unexpected error:', err);
+  process.exit(0);
+});