Add production deploy workflow

[agustin-littlehat]

Summary

• add a generic production deploy workflow with a 60-minute GitHub Actions job timeout
• run pnpm build:full in Actions so prepared Quake assets stay ephemeral and are not committed
• publish the prebuilt dist/ output only on main pushes using generic hosting secrets

Notes

• public workflow references only secret names: HOSTING_AUTH_TOKEN, HOSTING_SITE_ID, and QUAKE_SHAREWARE_URL
• same-repo PRs run the full build as a dry run; production publish is gated to main pushes

Validation

• YAML parse check
• git diff --check