Promotes the one-file CI fix on main (2d60e3e) to production.
loghq is already live with the uniform-auth model; this only updates the post-deploy smoke test in .github/workflows/deploy.yml, which still asserted the old page-action login (POST /login → 303 + loghq_token). It now verifies the new contract: POST /api/auth/login → 200 + auth-token cookie, then /api/me accepts the freshly issued token. No application change.
Merging re-runs the deploy (idempotent - same release, no additional logout) and the smoke test now does a real sign-in with the SMOKE_* secrets, so a green here is a genuine end-to-end proof of the new login in production.