ci(release): deploy production from runtime builder

tests/unit/test_release_scripts.py

@@ -17,7 +17,7 @@ def test_gitea_production_deploy_uses_production_ports():
     assert "GITHUB_TOKEN: ${{ github.token }}" in workflow
     assert "WEB_PORT=3001" not in production_section
     assert "http://127.0.0.1:8001/health" in production_section
-    assert "RELEASE_VERSION=\"${GITHUB_REF_NAME}\"" in production_section
+    assert "RELEASE_VERSION='${GITHUB_REF_NAME}' sh -s" in production_section
     assert "http://127.0.0.1:8000/health" not in production_section
 
 
@@ -173,9 +173,12 @@ def test_gitea_production_deploy_requires_runtime_builder_job():
     assert "runtime-images-${GITHUB_REF_NAME}.tar" in build_section
     assert "release-${GITHUB_REF_NAME}.tar.gz" in build_section
     assert "needs: build-production-runtime-images" in production_section
-    assert "Sync release artifact to production workspace" in production_section
-    assert "release_tar=\"/host/var/lib/xiaoxia-saas-production/release-${GITHUB_REF_NAME}.tar.gz\"" in production_section
+    assert "runs-on: runtime-builder" in production_section
+    assert "Deploy production over SSH" in production_section
+    assert "release_tar=\"/var/lib/xiaoxia-saas-production/release-${RELEASE_VERSION}.tar.gz\"" in production_section
+    assert "runtime-images-${RELEASE_VERSION}.tar" in production_section
     assert "apps/web/dist/index.html" in production_section
+    assert "sh /var/lib/xiaoxia-saas-production/repo/infra/docker/deploy-production.sh" in production_section
 
 
 def test_build_host_runbook_requires_off_production_runtime_builds():