optimize building and deploying

.gitea/workflows/build.yml

@@ -9,14 +9,6 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: 1.4.0
-      - name: Install and test
-        run: |
-          bun install --frozen-lockfile
-          bun run test:unit -- --run
-
       # Build once. The same SHA-tagged image stays on the deployment host for
       # one-click promotion to production; the production workflow never rebuilds it.
       - uses: docker/build-push-action@v5

.gitea/workflows/deploy-production.yml

@@ -12,14 +12,6 @@ jobs:
         with:
           ref: staging
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: 1.4.0
-      - name: Check staging source
-        run: |
-          bun install --frozen-lockfile
-          bun run test:unit -- --run
-
       - name: Configure deployment SSH key
         env:
           DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}

Dockerfile

@@ -3,6 +3,7 @@ WORKDIR /app
 COPY package.json bun.lock ./
 RUN bun install --frozen-lockfile
 COPY . .
+RUN bun run test:unit -- --run
 RUN bun run build
 
 FROM oven/bun:1.4.0