deploy.yml: remove temporary debug-secrets step. Secret injection confirmed working (SSH_KEY=516 bytes, SWARM_MANAGER_IP=12 bytes) after repo was switched back to public. Root cause of the entire multi-day secret-provisioning saga: (1) CI_COMMIT_CHANGED_FILES renamed to CI_PIPELINE_FILES in Woodpecker 3.16, (2) --no-interpolate flag was misplaced, (3) dotfolders matched as bogus stack names, (4) private-repo flip broke Woodpecker's secret injection entirely. All four now fixed.

.woodpecker/deploy.yml

@@ -3,20 +3,6 @@ when:
     branch: main
 
 steps:
-  debug-secrets:
-    image: alpine:latest
-    environment:
-      SSH_KEY:
-        from_secret: ssh_key
-      SWARM_MANAGER_IP:
-        from_secret: swarm_manager_ip
-    commands:
-      - |
-        echo "=== DIAGNOSTIC: secret byte lengths only, never values (temporary) ==="
-        echo "SSH_KEY length: $(echo -n "$SSH_KEY" | wc -c)"
-        echo "SWARM_MANAGER_IP length: $(echo -n "$SWARM_MANAGER_IP" | wc -c)"
-        echo "=== END DIAGNOSTIC ==="
-
   validate:
     image: alpine:latest
     commands: