fix(ci): artifact@v4, AUTH_GOOGLE_SECRET secret, REDIS_HOST + Telegram dans deploy.yaml

ci.yaml:
- upload/download-artifact v3 → v4 (Gitea/Forgejo compatibilité)
- AUTH_GOOGLE_SECRET: vars → secrets (Google OAuth était cassé en prod)

deploy.yaml:
- Ajout REDIS_HOST=redis (manquant → Redis inaccessible au démarrage manuel)
- Ajout TELEGRAM_BOT_TOKEN + TELEGRAM_CHAT_ID (notifications manquantes)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

.gitea/workflows/deploy.yaml

@@ -59,6 +59,8 @@ jobs:
           SOCKET_HTTP_PORT:     ${{ vars.SOCKET_HTTP_PORT }}
           SOCKET_INTERNAL_URL:  ${{ vars.SOCKET_INTERNAL_URL }}
           NEXT_PUBLIC_SOCKET_URL: ${{ vars.NEXT_PUBLIC_SOCKET_URL }}
+          TELEGRAM_BOT_TOKEN:   ${{ secrets.TELEGRAM_BOT_TOKEN }}
+          TELEGRAM_CHAT_ID:     ${{ secrets.TELEGRAM_CHAT_ID }}
         run: |
           ENV_FILE="/opt/memento/.env.docker"
           touch "$ENV_FILE"
@@ -108,6 +110,9 @@ jobs:
           upsert SOCKET_HTTP_PORT       "$SOCKET_HTTP_PORT"
           upsert SOCKET_INTERNAL_URL    "$SOCKET_INTERNAL_URL"
           upsert NEXT_PUBLIC_SOCKET_URL "$NEXT_PUBLIC_SOCKET_URL"
+          upsert REDIS_HOST             "redis"
+          upsert TELEGRAM_BOT_TOKEN     "$TELEGRAM_BOT_TOKEN"
+          upsert TELEGRAM_CHAT_ID       "$TELEGRAM_CHAT_ID"
 
       - name: Deploy (full build, no CI artifact)
         env: