ci: skip canary deploy, kubeconfig, and k8s promotion (RBAC not ready)

- Skip: Setup kubeconfig, Deploy canary, Integration tests, Cleanup, Gate
- Comment out k8s rolling update promotion (needs kubeconfig)
- Remove kubectl install from dependencies (nothing uses it)
- Tag :latest still works (docker only, no kubectl)
- Re-enable when ci-tekton-trigger SA has pod create/delete RBAC

.gitea/workflows/ci.yaml

@@ -60,7 +60,7 @@ jobs:
       # (Temporal, Gotify). Tests run against its pod IP directly.
       # Zero downtime: production pods untouched until tests pass.
       - name: Setup kubeconfig
-        if: false  # SKIP: only needed for canary deploy, RBAC not ready
+        if: false  # SKIP: only needed for canary deploy
         run: |
           mkdir -p ~/.kube
           echo "${KUBECONFIG_B64}" | base64 -d > ~/.kube/config
@@ -170,7 +170,7 @@ jobs:
       # ── Zero-downtime promotion ──────────────────────────────
       # kubectl set image triggers a rolling update: new pods come up
       # before old pods are terminated. Production traffic uninterrupted.
-      # TODO: Re-enable rolling update when kubeconfig/RBAC is ready
+      # TODO: Re-enable k8s rolling update when kubeconfig/RBAC is ready
       # - name: Promote — rolling update
       #   if: github.event_name == 'push' && github.ref == 'refs/heads/main'
       #   run: |