diff --git a/.dockerignore b/.dockerignore
index 318180a..766c7f7 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -19,3 +19,7 @@ logs
 .vitest
 *.md
 !package.json
+# SKILL.md is served at /SKILL.md by src/routes/agent-discovery.ts and must
+# exist in the production image; the *.md exclusion above would otherwise
+# silently break `COPY SKILL.md` in the Dockerfile.
+!SKILL.md
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4388c94..b491743 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,6 +5,10 @@ on:
     branches: [master]
   pull_request:
     branches: [master]
+  # Allow deploy.yml to depend on this workflow as a reusable workflow
+  # (`uses: ./.github/workflows/ci.yml`). Without workflow_call, deploy.yml
+  # fails at parse time with a 0-second failure on every merge.
+  workflow_call:
 
 permissions:
   contents: read