Fix CI pipeline: deploy on main, webhook on PRs only, show failure output

- Skip webhook notification on main branch pushes
- Gate build/deploy on lint and test success via CI outputs instead of
  notify job dependency
- Print lint and test output to step logs so failures are visible in
  the Actions UI

.github/workflows/deploy.yml

@@ -44,6 +44,7 @@ jobs:
           set +e
           OUTPUT=$(npm run lint 2>&1)
           EXIT_CODE=$?
+          echo "$OUTPUT"
           # Truncate before writing to GITHUB_OUTPUT to prevent
           # "argument list too long" in downstream jobs
           echo "lint_output<<EOF" >> $GITHUB_OUTPUT
@@ -58,6 +59,7 @@ jobs:
           set +e
           OUTPUT=$(npm test -- --runInBand 2>&1)
           EXIT_CODE=$?
+          echo "$OUTPUT"
           # Truncate before writing to GITHUB_OUTPUT to prevent
           # "argument list too long" in downstream jobs
           echo "test_output<<EOF" >> $GITHUB_OUTPUT
@@ -75,7 +77,7 @@ jobs:
     name: Send Webhook Notification
     runs-on: ubuntu-latest
     needs: [ci]
-    if: always()
+    if: always() && github.ref != 'refs/heads/main'
 
     steps:
       - name: Send results to n8n webhook
@@ -198,8 +200,12 @@ jobs:
   build:
     name: Build & Push Image
     runs-on: ubuntu-latest
-    needs: [ci, scan-deps, notify]
-    if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
+    needs: [ci, scan-deps]
+    if: >-
+      github.ref == 'refs/heads/main' &&
+      github.event_name != 'pull_request' &&
+      needs.ci.outputs.lint_status == 'success' &&
+      needs.ci.outputs.test_status == 'success'
 
     outputs:
       image_tag: ${{ steps.set-tag.outputs.tag }}