fix: repair deployment workflows for tag-based release flow

- auto-release.yml / release.yml: add git user config and remote URL
  with app token so release-it can push commits and tags
- release-web.yml: add git credentials for gh-pages push, remove
  duplicate tag trigger (release: published is sufficient), drop
  redundant oven-sh/setup-bun (mise handles it) and validate step
  (already ran in auto-release)
- release-desktop.yml: remove duplicate tag trigger, fix release job
  to upload assets to existing release instead of creating a new one,
  drop redundant oven-sh/setup-bun
- release-mobile.yml: remove duplicate tag trigger and redundant
  oven-sh/setup-bun

https://claude.ai/code/session_01AecUcpXWut7bntMGGprAMH

Author: claude

.github/workflows/auto-release.yml

@@ -42,8 +42,13 @@ jobs:
 
       - name: Configure git
         run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git"
           # Set up branch tracking so release-it doesn't fail on upstream check
           git branch --set-upstream-to=origin/main main 2>/dev/null || true
+        env:
+          GITHUB_TOKEN: ${{ steps.auth.outputs.token }}
 
       - name: Debug release-it state
         run: |

.github/workflows/release-desktop.yml

@@ -3,9 +3,6 @@ name: Release Desktop
 on:
   release:
     types: [published]
-  push:
-    tags:
-      - 'v*'
   workflow_dispatch:
 
 permissions:
@@ -19,10 +16,6 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
@@ -43,10 +36,6 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
@@ -67,10 +56,6 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
@@ -84,20 +69,20 @@ jobs:
           path: packages/desktop/dist/*.AppImage
           if-no-files-found: warn
 
-  release:
+  upload-release-assets:
     needs: [build-macos, build-windows, build-linux]
     runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/')
+    if: github.event_name == 'release'
     steps:
       - name: Download all artifacts
         uses: actions/download-artifact@v4
         with:
           merge-multiple: true
           path: dist
 
-      - name: Create GitHub Release
+      - name: Upload assets to release
         uses: softprops/action-gh-release@v2
         with:
           files: dist/*
-          generate_release_notes: true
-          draft: true
+          tag_name: ${{ github.event.release.tag_name }}
+          fail_on_unmatched_files: false

.github/workflows/release-mobile.yml

@@ -3,9 +3,6 @@ name: Release Mobile
 on:
   release:
     types: [published]
-  push:
-    tags:
-      - 'v*'
   workflow_dispatch:
 
 permissions:
@@ -19,10 +16,6 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
@@ -49,10 +42,6 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - uses: actions/setup-java@v4
         with:
           distribution: temurin

.github/workflows/release-web.yml

@@ -3,9 +3,6 @@ name: Release Web
 on:
   release:
     types: [published]
-  push:
-    tags:
-      - 'v*'
   workflow_dispatch:
 
 permissions:
@@ -33,16 +30,9 @@ jobs:
 
       - uses: jdx/mise-action@v2
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - name: Run quality gate
-        run: bun run validate
-
       - name: Build web
         run: bun run build
         env:
@@ -52,6 +42,11 @@ jobs:
 
       - name: Deploy to GitHub Pages (app/ subdirectory)
         run: |
+          # Configure git credentials
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git"
+
           # Fetch gh-pages branch or create it
           git fetch origin gh-pages || true
           git checkout gh-pages || git checkout --orphan gh-pages
@@ -69,3 +64,5 @@ jobs:
           git add app/ 404.html index.html
           git commit -m "Deploy production app ($(git describe --tags --always))" --allow-empty
           git push origin gh-pages
+        env:
+          GITHUB_TOKEN: ${{ steps.auth.outputs.token }}

.github/workflows/release.yml

@@ -54,7 +54,12 @@ jobs:
 
       - name: Configure git
         run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git"
           git branch --set-upstream-to=origin/main main 2>/dev/null || true
+        env:
+          GITHUB_TOKEN: ${{ steps.auth.outputs.token }}
 
       - name: Debug release-it state
         run: |