refactor(ci): modularize workflows into ci, code-quality, security, deploy

- Split monolithic ci.yml into focused workflow files
- Add code-quality.yml with complexity analysis and duplicate detection
- Replace template codeql.yml with comprehensive security.yml (CodeQL, dependency audit, dependency review, secret scan)
- Separate deploy into its own workflow triggered by CI success

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ env:
 
 jobs:
   lint:
-    name: Lint
+    name: ESLint
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -31,7 +31,7 @@ jobs:
       - run: npm run lint
 
   typecheck:
-    name: Type Check
+    name: TypeScript
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -70,23 +70,3 @@ jobs:
         with:
           name: dist
           path: dist/
-
-  deploy:
-    name: Deploy
-    runs-on: ubuntu-latest
-    needs: build
-    if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          name: dist
-          path: dist/
-      - name: Deploy to VPS1
-        uses: appleboy/scp-action@v1.0.0
-        with:
-          host: ${{ secrets.VPS1_HOST }}
-          username: ${{ secrets.VPS1_USER }}
-          key: ${{ secrets.VPS1_SSH_KEY }}
-          source: 'dist/*'
-          target: '/var/www/telegram.pezkuwichain.io'
-          strip_components: 1