refactor: replace appleboy/ssh-action with native ssh command execution in deployment workflows

.gitea/workflows/deploy-prod.yml

@@ -66,34 +66,52 @@ jobs:
       url: https://practicas.prod.kubistudio.cloud
     steps:
       - name: Deploy via SSH
-        uses: appleboy/ssh-action@v1.0.3
-        with:
-          host: ${{ secrets.DEPLOY_HOST }}
-          username: ${{ secrets.DEPLOY_USERNAME }}
-          key: ${{ secrets.DEPLOY_SSH_KEY }}
-          script: |
+        run: |
+          set -euo pipefail
+          IMAGE_TAG="${{ needs.build-and-push.outputs.image_tag }}"
+          APP_VERSION="${{ needs.build-and-push.outputs.app_version }}"
+
+          eval $(ssh-agent -s)
+          echo "${{ secrets.DEPLOY_SSH_KEY }}" | ssh-add -
+
+          mkdir -p ~/.ssh
+          ssh-keyscan -H ${{ secrets.DEPLOY_HOST }} >> ~/.ssh/known_hosts 2>/dev/null
+
+          # 1. Pasamos las variables como argumentos en el mismo orden
+          ssh ${{ secrets.DEPLOY_USERNAME }}@${{ secrets.DEPLOY_HOST }} bash -s \
+            "${{ env.REGISTRY_URL }}" \
+            "${{ env.IMAGE_NAME }}" \
+            "${IMAGE_TAG}" \
+            "${APP_VERSION}" \
+            "${{ gitea.actor }}" \
+            "${{ secrets.TOKEN }}" << 'EOF'
             set -euo pipefail
 
+            # 2. Las recibimos dentro de la sesión remota
+            REGISTRY_URL=$1
+            IMAGE_NAME=$2
+            IMAGE_TAG=$3
+            APP_VERSION=$4
+            GITEA_ACTOR=$5
+            TOKEN=$6
+
             echo "Saving current image tag for rollback..."
             CURRENT_IMAGE=$(docker inspect cicd-prod --format '{{.Config.Image}}' 2>/dev/null || echo "")
 
             echo "Pulling image..."
-            echo "${{ secrets.TOKEN }}" | docker login ${{ env.REGISTRY_URL }} -u ${{ gitea.actor }} --password-stdin
-            docker pull ${{ env.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ needs.build-and-push.outputs.image_tag }}
+            echo "$TOKEN" | docker login $REGISTRY_URL -u $GITEA_ACTOR --password-stdin
+            docker pull $REGISTRY_URL/$IMAGE_NAME:$IMAGE_TAG
 
             echo "Stopping existing container..."
             docker stop cicd-prod 2>/dev/null || true
             docker rm cicd-prod 2>/dev/null || true
 
             echo "Starting new container..."
-            docker run -d \
-              --name cicd-prod \
-              --restart unless-stopped \
-              -p 8083:80 \
+            docker run -d --name cicd-prod --restart unless-stopped -p 8083:80 \
               -e APP_ENV=production \
-              -e APP_VERSION=${{ needs.build-and-push.outputs.app_version }} \
+              -e APP_VERSION=${APP_VERSION} \
               -e DEPLOY_TIME=$(date -u +"%Y-%m-%dT%H:%M:%SZ") \
-              ${{ env.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ needs.build-and-push.outputs.image_tag }}
+              $REGISTRY_URL/$IMAGE_NAME:$IMAGE_TAG
 
             echo "Waiting for health check..."
             HEALTHY=false
@@ -129,6 +147,7 @@ jobs:
 
               exit 1
             fi
+          EOF
 
   release-notes:
     name: Release Notes