ci: build GUI-free apk and deb variants

README names headless servers as the audience for --browser remote,
but the only published packages pull the full webview closure: on
Alpine that is 599 MiB / 214 packages installed, versus 65 MiB / 43
for the same source built with the GUI flags off.

The flags already exist and yuezk#638 made them effective for the package
depends=, so this is only a matter of publishing the result. Same
source, same builder images; the job differs from build-gp by three
-e flags and the artifact name.

Scoped to apk and deb because those are the two formats whose
depends= is gated on the flags today (Makefile init-apk /
init-debian). An rpm built this way would still declare the GUI
dependencies, so a CLI rpm would mislead.

Kept as a separate job rather than a matrix axis so it cannot affect
the existing pipeline; happy to fold it into build-gp's matrix
instead if preferred.

Author: Ronald Hötschl

.github/workflows/build.yaml

@@ -180,6 +180,56 @@ jobs:
         path: |
           build-gp-${{ matrix.package }}/artifacts/*
 
+  # CLI-only variant, for the headless servers README.md names as the audience
+  # for `--browser remote`. Same source and same builder images as build-gp;
+  # only the three GUI flags differ, which #638 made effective for `depends=`.
+  #
+  # Scoped to apk and deb: those are the two formats whose depends= is gated on
+  # the flags today (Makefile `init-apk` / `init-debian`). An rpm built this way
+  # would still declare the GUI dependencies, so a "CLI" rpm would mislead.
+  build-gp-cli:
+    if: ${{ !startsWith(github.ref, 'refs/tags/') }}
+    needs:
+    - tarball
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - runner: ubuntu-latest
+            arch: amd64
+          - runner: ubuntu-24.04-arm
+            arch: ubuntu-24.04-arm
+        package: [apk, deb]
+    runs-on: ${{ matrix.os.runner }}
+    name: build-gp-cli (${{ matrix.package }}, ${{ matrix.os.arch }})
+    steps:
+    - name: Prepare workspace
+      run: |
+        rm -rf build-gp-cli-${{ matrix.package }}
+        mkdir -p build-gp-cli-${{ matrix.package }}
+    - name: Download tarball
+      uses: actions/download-artifact@v8
+      with:
+        name: artifact-source
+        path: build-gp-cli-${{ matrix.package }}
+    - name: Build CLI-only ${{ matrix.package }} package in Docker
+      run: |
+        docker run --rm \
+          -e COREPACK_INTEGRITY_KEYS=0 \
+          -e LIBXML2_STATIC=1 \
+          -e INCLUDE_GUI=0 \
+          -e BUILD_GUI_HELPER=0 \
+          -e BUILD_WEBVIEW_AUTH=0 \
+          -v $(pwd)/build-gp-cli-${{ matrix.package }}:/workspace \
+          yuezk/gpdev:${{ matrix.package }}-builder-tauri2
+    - name: Upload CLI-only ${{ matrix.package }} package
+      uses: actions/upload-artifact@v7
+      with:
+        name: artifact-gp-cli-${{ matrix.package }}-${{ matrix.os.arch }}
+        if-no-files-found: error
+        path: |
+          build-gp-cli-${{ matrix.package }}/artifacts/*
+
   build-docker-image:
     if: ${{ !startsWith(github.ref, 'refs/tags/') }}
     strategy: