docs: simplify deployment contract

[frankekn]

Summary

• remove stale claims that needlefish-ci automatically triggers deployment
• document the current separation between the manual self-managed verification workflow and the legacy/source install script
• keep CI behavior unchanged

Verification

Checked the branch against the current workflow definitions before opening this PR:

• deploy.yml remains workflow_dispatch only
• self-managed verification still targets ~/.local/share/needlefish-self
• needlefish-ci still runs on PRs and pushes to main
• pnpm check, pnpm lint, and pnpm test remain in the CI workflow
• stale workflow_run.head_sha / deploy.yml waits on claims are absent

No runtime behavior or release files are changed.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[github-actions]

LGTM ✅ — PASS — documentation now matches the manual verification workflow and separate source-install script.

Coverage: full diff reviewed in one pass (2 files)

Review target: PR #161 42cbdc9..fd399c0

Human callouts (non-blocking):

• workflow: .github/workflows/ci.yml

Findings

No actionable findings. Prefer this over padding weak ones.

Checked (5)

• Verified .github/workflows/deploy.yml:3-4 is workflow_dispatch only and .github/workflows/deploy.yml:14-41 validates an existing self-managed release without installing source.
• Verified scripts/deploy-ubuntu.sh:6-76 separately installs source releases under ~/.local/share/needlefish.
• Verified .github/workflows/ci.yml:6-37 has no deployment invocation.
• TRIGGER_C cleared carrier=.github/workflows/ci.yml:3 promises=CI does not deploy and deploy is manual body=CI defines only its verification job @.github/workflows/ci.yml:18-37; deploy accepts only workflow_dispatch @.github/workflows/deploy.yml:3-4 callers=[none relies=no]
• TRIGGER_C cleared carrier=AGENTS.md:39 and AGENTS.md:112 promises=deploy verifies an operator-installed self-managed release while deploy-ubuntu.sh performs separate source installation body=installed-release verification @.github/workflows/deploy.yml:14-41; source installation @scripts/deploy-ubuntu.sh:30-76 callers=[none relies=no]

_{2 calls · review 24s → critic 11s · total 34s}