fix: use certificate host for deployment health checks

.gitea/workflows/deploy.yml

@@ -104,6 +104,7 @@ jobs:
           PROJECT_DIR="$PROJECT" \
           PYTHON_BIN="$PYTHON_BIN" \
           PREVIOUS_REVISION="$PREVIOUS_REVISION" \
+          DEPLOY_HEALTH_HOST="math.jacky0987.xyz" \
           DEPLOY_SMOKE_BASE_URL="http://127.0.0.1:4321" \
           DEPLOY_SMOKE_WS_URL="ws://127.0.0.1:4321/ws/health/" \
             bash scripts/deploy_production.sh

backend/common/test_deployment_security.py

@@ -12,5 +12,6 @@ def test_edge_hsts_ownership_is_explicit_and_verified():
     assert 'os.getenv("DJANGO_HSTS_AT_EDGE", "false")' in settings
     assert '["security.W004"]' in settings
     assert "DJANGO_HSTS_AT_EDGE=true" in workflow
+    assert 'DEPLOY_HEALTH_HOST="math.jacky0987.xyz"' in workflow
     assert "strict-transport-security:.*max-age=[1-9][0-9]*" in deploy
     assert "DJANGO_HSTS_AT_EDGE=false" in example