deploy.yml: add temporary debug-secrets step (prints byte length of SSH_KEY and SWARM_MANAGER_IP only, never values) to determine whether secret injection is failing repo-wide or just for swarm_manager_ip. Repo has been switched back to public.

.woodpecker/deploy.yml

@@ -3,6 +3,20 @@ when:
     branch: main
 
 steps:
+  debug-secrets:
+    image: alpine:latest
+    environment:
+      SSH_KEY:
+        from_secret: ssh_key
+      SWARM_MANAGER_IP:
+        from_secret: swarm_manager_ip
+    commands:
+      - |
+        echo "=== DIAGNOSTIC: secret byte lengths only, never values (temporary) ==="
+        echo "SSH_KEY length: $(echo -n "$SSH_KEY" | wc -c)"
+        echo "SWARM_MANAGER_IP length: $(echo -n "$SWARM_MANAGER_IP" | wc -c)"
+        echo "=== END DIAGNOSTIC ==="
+
   validate:
     image: alpine:latest
     commands: