feat: literate IaC with tangle-deploy pipeline

- Converted Traefik section to tangle blocks with absolute paths
- Created .gitea/workflows/tangle.yaml Gitea Action
- tangle-deploy.sh: tangles org → writes files → restarts services

.gitea/workflows/tangle.yaml

@@ -0,0 +1,23 @@
+name: Tangle and Deploy
+on: [push]
+
+jobs:
+  tangle:
+    runs-on: debian-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Tangle infrastructure.org
+        run: |
+          docker run --rm \
+            -v /:/host \
+            -v $(pwd):/workspace:ro \
+            debian:stable-slim \
+            bash -c "cp -r /workspace /host/tmp/infra-tangle && chroot /host /usr/local/bin/tangle-deploy /tmp/infra-tangle"
+
+      - name: Restart affected services
+        run: |
+          docker run --rm \
+            -v /:/host \
+            debian:stable-slim \
+            bash -c "chroot /host bash -c 'cd /docker/compose && docker compose up -d traefik 2>&1'"