Enable beta auto-deploy and Tianji consent-gated events (#35)

Flip workflows so master deploys beta and prod is workflow_dispatch only.
Load distinct Tianji website IDs from env; page views always on, custom events require consent.

.gitea/workflows/deploy-prod.yml

@@ -1,15 +1,31 @@
 name: Deploy Prod
 
-# Runs after Unit Tests completes on master. Direct pushes only (not PRs).
+# Manual prod deploy only (mirrors dta_webapp). Push to master deploys beta.
 on:
-  workflow_run:
-    workflows: [Unit Tests]
-    types: [completed]
-    branches: [master]
+  workflow_dispatch: {}
 
 jobs:
-  deploy:
-    if: gitea.event.workflow_run.conclusion == 'success' && gitea.event.workflow_run.event == 'push'
+  unit-tests:
+    runs-on: self-hosted
+    defaults:
+      run:
+        working-directory: llm-fe
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run unit tests
+        run: npm run test:ci
+
+  deploy-prod:
+    needs: unit-tests
     runs-on: self-hosted
     env:
       SERVER_INFRA_ROOT: /home/westfarn/Documents/repos/server-infra
@@ -19,4 +35,4 @@ jobs:
           "$SERVER_INFRA_ROOT/scripts/deploy.sh" \
             --app chat_web_app \
             --env prod \
-            --ref "${{ gitea.event.workflow_run.head_sha }}"
+            --ref "${{ gitea.sha }}"