ci: use localadmin user for deploy

- Added GET /orchestrator/health for widget health checks
- Added GET /orchestrator/events/recent for recent agent events
- Widgets were calling endpoints that returned 404

.woodpecker/ci.yml

@@ -347,10 +347,6 @@ steps:
         from_secret: ssh_private_key
       SSH_KNOWN_HOSTS:
         from_secret: ssh_known_hosts
-      GITEA_USER:
-        from_secret: gitea_username
-      GITEA_TOKEN:
-        from_secret: gitea_token
     commands:
       - apk add --no-cache openssh-client
       - |
@@ -362,15 +358,12 @@ steps:
         echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
         chmod 600 ~/.ssh/id_ed25519
 
-        # Deploy to swarm - force update to pull new images
+        # Deploy to swarm
         echo "🚀 Deploying to Docker Swarm..."
         ssh -o StrictHostKeyChecking=no localadmin@10.1.1.45 \
-          "docker login git.mosaicstack.dev -u \$GITEA_USER -p \$GITEA_TOKEN && \
-           docker service update --force mosaic_api && \
-           docker service update --force mosaic_web && \
-           docker service update --force mosaic_orchestrator && \
-           docker service update --force mosaic_coordinator && \
-           echo '✅ All services updated'"
+          "cd /opt/mosaic-stack && \
+           docker login git.mosaicstack.dev -u \$(echo \$GITEA_USER) -p \$GITEA_TOKEN || true && \
+           docker stack deploy -c docker-compose.yml mosaic"
     when:
       - branch: [main]
         event: [push, manual, tag]