asepharyana ec0ab4dbb3 fix(deploy): wire Phase 3 services + GitHub git-sync webhook ...

- apps/api: assertWebhookAuth now verifies GitHub X-Hub-Signature-256 HMAC
  (raw-body HMAC-SHA256) AND the manual x-webhook-secret header. GitHub does
  not send a custom header, so only the HMAC path made the push webhook work.
- root package.json: api/worker scripts use absolute bun path + direct-file
  form (bun --cwd apps/api run dev errored in bun 1.3.14).
- deploy/*.service: ExecStart uses /home/code/.bun/bin/bun (systemd PATH lacks bun).
- GitHub push webhook created -> https://wiki.asepharyana.my.id/hooks/reindex
  (verified: ping + push deliveries return 200, worker drains, 0 failed).
- Caddy: expose /hooks/* + /health on wiki.asepharyana.my.id -> :4020.
Services mcpedia-api + mcpedia-worker now enabled + active on host.

2026-08-20 09:38:32 +07:00

..

mcpedia-api.service

fix(deploy): wire Phase 3 services + GitHub git-sync webhook

2026-08-20 09:38:32 +07:00

mcpedia-web.service

deploy: add mcpedia-web.service systemd unit (port 4016)

2026-08-19 23:21:59 +07:00

mcpedia-worker.service

fix(deploy): wire Phase 3 services + GitHub git-sync webhook

2026-08-20 09:38:32 +07:00