Migrate deploy to direct Tailscale SSH

Drops dependency on the ci/service-manager middleman. Runners tagged
tag:ci-runner now SSH directly to tag:service nodes via Tailscale SSH;
ACL gates access, no keys.

.gitea/workflows/deploy.yaml

@@ -1,11 +1,15 @@
 name: Deploy ${{ gitea.repository }}
-run-name: ${{ gitea.actor }} is deploying ajet.fyi ${{ gitea.repository }}
+run-name: ${{ gitea.actor }} is deploying ${{ gitea.repository }}
 on:
   push:
     branches:
       - main
 jobs:
-  build:
+  deploy:
     runs-on: ubuntu-latest
     steps:
-      - run: "curl https://192.168.1.65/restart -k -H 'Content-Type: application/edn' -d '{:service/name \"www\"}'"
+      - name: Deploy via Tailscale SSH
+        run: |
+          ssh -o StrictHostKeyChecking=accept-new -o BatchMode=yes \
+            root@100.106.10.22 \
+            'cd /root/repos/www && git pull && ./start.sh'