fix: pin deploy job to agent-workspace runner

The deploy job uses SSH to connect to lintel-prod-01. When the
lintel-prod-01 runner picks up the job, the Docker container cannot
SSH back to its own host, causing 'dial tcp: i/o timeout'. Pin to
the 'deploy' label which only exists on agent-workspace.

.gitea/workflows/ci.yml

@@ -215,7 +215,7 @@ jobs:
 
   deploy:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
+    runs-on: deploy
     steps:
       - name: Deploy to lintel-prod-01
         uses: appleboy/ssh-action@v1