Add CI dependencies for deployment (#16)

* Add imagemagick to CI dependencies

Lektor requires imagemagick for image processing during build.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add encrypted fonts for CI deployment

Fonts are copyrighted and excluded from git, so they were missing
from CI builds. This adds an encrypted archive that gets decrypted
at build time using a FONTS_PASSPHRASE secret.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: roberto-arista

.github/workflows/deploy.yml

@@ -22,6 +22,9 @@ jobs:
 
       - run: uv sync
 
+      - name: Decrypt fonts
+        run: openssl enc -aes-256-cbc -pbkdf2 -d -in assets/static/fonts.tar.gz.enc -pass pass:'${{ secrets.FONTS_PASSPHRASE }}' | tar xzf - -C assets/static
+
       - run: uv run lektor build --output-path build
 
       - uses: cloudflare/wrangler-action@v3