Reverts deploy-test to push/workflow_dispatch only, drops the pull_request trigger

The pull_request trigger was a temporary convenience to test the deploy
pipeline itself against the real test environment on every PR push. Now
that the pipeline is verified working end to end, going back to only
deploying on a master push or manual dispatch avoids concurrent PRs
silently overwriting the single shared test environment.

.gitea/workflows/continuous_integration.yaml

@@ -344,15 +344,10 @@ jobs:
           path: ${{ env.ARTIFACT_NAME_PRODUCTION }}
           retention-days: 1
 
-  # Automatic test deploy on push to master, any workflow_dispatch run, or a pull_request event
-  # (FR-03, D-01, D-09 — pull_request added as a deliberate extension beyond the original scope, so
-  # PR pushes can be verified against the real test environment without a manual workflow_dispatch
-  # each time). There is only one shared test environment: with more than one PR open at once, each
-  # push to any of them will redeploy and overwrite it — fine for a single active PR, revisit
-  # (e.g. gate behind a label, or restrict to one branch) before that becomes a real scenario.
+  # Automatic test deploy on push to master, or on any workflow_dispatch run (FR-03, D-01, D-09).
   deploy-test:
     needs: [publish-test, config]
-    if: github.event_name == 'workflow_dispatch' || github.event_name == 'pull_request' || (github.event_name == 'push' && github.ref == 'refs/heads/master')
+    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && github.ref == 'refs/heads/master')
     uses: ./.gitea/workflows/deploy-scp.yaml
     secrets: inherit
     with: