fix(infra): prevent redirect loop by excluding gatekeeper path from app router

.gitea/workflows/deploy.yml

@@ -271,6 +271,8 @@ jobs:
             AUTH_MIDDLEWARE="$STD_MW"
             COMPOSE_PROFILES=""
           else
+            # Exclude Gatekeeper from the main app router to prevent redirect loops
+            TRAEFIK_RULE="Host(\`${TRAEFIK_HOST}\`) && !PathPrefix(\`/gatekeeper\`)"
             # Order: Forward (Proto) -> Auth -> Compression
             AUTH_MIDDLEWARE="${PROJECT_NAME}-forward,${PROJECT_NAME}-auth,compress"
             COMPOSE_PROFILES="gatekeeper"