v5: Pass NUXT_AUTH0_CLIENT_ID to production build (#345)

Fixes production `/auth/login` 500s. tlv2-auth's module setup bakes a
`disabled.invalid` placeholder into `runtimeConfig.auth0` unless
`NUXT_AUTH0_CLIENT_ID` is set at build time (see
`@interline-io/tlv2-auth/dist/module.mjs:37`). Staging works because
Cloudflare's built-in Pages builder injects env vars at build time; GH
Actions wasn't passing this one.

related to
https://github.com/interline-io/calact-network-analysis-tool/issues/332

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

v4: allow manually triggering of production deployment (#343)

related to #332

v3: Fix production deploy to use Production environment (#342)

Adds `--branch=main` to `wrangler pages deploy` so Cloudflare labels
deployments as Production instead of Preview

related to #332

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v2: Fix production deploy output directory (#341)

## Summary
The `cloudflare_pages` Nitro preset outputs to `dist/`, not
`.output/public`. Updates the deploy workflow to use the correct path.

## Test plan
- Cut a release and verify the deploy workflow completes successfully

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v1: Add production deploy workflow (#340)

## Summary

Adds a GitHub Actions workflow to deploy to the new
`calact-network-analysis-tool-prod` Cloudflare Pages project when a
GitHub release is published. The existing Cloudflare GitHub App
continues to handle staging deploys (push to `main`) and PR preview
deployments.

### Setup required before first deploy
- Create `calact-network-analysis-tool-prod` Pages project in Cloudflare
dashboard (Direct Upload, no Git connection)
- Add GitHub Actions repo secrets: `CLOUDFLARE_API_TOKEN`,
`CLOUDFLARE_ACCOUNT_ID`, `NUXT_PUBLIC_TLV2_PROTOMAPS_APIKEY`
- Add runtime env vars in the Cloudflare Pages project settings:
`NUXT_AUTH0_DOMAIN`, `NUXT_AUTH0_CLIENT_ID`, `NUXT_AUTH0_CLIENT_SECRET`,
`NUXT_AUTH0_SESSION_SECRET`, `NUXT_AUTH0_APP_BASE_URL`,
`NUXT_AUTH0_AUDIENCE`, `NUXT_TLV2_PROXY_BASE_DEFAULT`,
`NUXT_TLV2_GRAPHQL_APIKEY`
- Add production CNAME pointing at
`calact-network-analysis-tool-prod.pages.dev`

## Test plan
- Merge and cut a test release to verify the workflow triggers and
deploys successfully
- Confirm the deployed site loads and authenticates correctly at the
production URL

closes
https://github.com/interline-io/calact-network-analysis-tool/issues/332

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>