add watchtower deploy step and nginx proxy for update endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/build.yml

@@ -22,3 +22,8 @@ jobs:
           context: .
           push: true
           tags: git.timothykim.net/timothykim/static:latest
+
+      - name: Deploy
+        run: |
+          curl -sf -H "Authorization: Bearer ${{ secrets.WATCHTOWER_TOKEN }}" \
+            https://www.timothykim.net/watchtower/v1/update

nginx.conf

@@ -8,6 +8,10 @@ server {
         try_files $uri $uri/ /index.html;
     }
 
+    location /watchtower/ {
+        proxy_pass http://watchtower:8080/;
+    }
+
     # Cache static assets aggressively
     location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff2)$ {
         expires 1y;