Demo Server Deployment

Automated SFTP deployment of the src/ directory to the demo server on merge to main.

Overview

The deploy-demo.yml workflow pushes the contents of src/ to a demo server over SFTP when:

Unlike deploy-dev.yml, the demo workflow deploys the real version (no "development" override).

Variable	Scope	Description
`DEMO_FTP_HOST`	org	Demo server hostname (may include `:port` suffix)
`DEMO_FTP_PATH`	org	Base remote path (e.g., `/var/www/demo`)
`DEMO_FTP_USERNAME`	org	SFTP username
`DEMO_FTP_SUFFIX`	repo	Repo-specific subdirectory appended to `DEMO_FTP_PATH`
`DEMO_FTP_PORT`	org (optional)	Explicit port override (auto-detected from host or defaults to 22)

Secret	Scope	Description
`DEMO_FTP_KEY`	org	SSH private key (preferred)
`DEMO_FTP_PASSWORD`	org	SFTP password or key passphrase

At least one of DEMO_FTP_KEY or DEMO_FTP_PASSWORD must be set.

Permission check — jmiller and gitea-actions[bot] are always authorized; other actors need admin or maintain role
Skip on chore/ branches — PRs from chore/ branches do not trigger deployment
Skip if DEMO_FTP_SUFFIX not set — repos without the variable are silently skipped
Clear remote folder — always clears the remote destination before uploading
Upload — deploys via deploy-sftp.php using phpseclib3
Failure issue — creates/updates a deploy-failure issue on error