fix: favicon and ci deployment checks

.gitea/workflows/browser-e2e.yml

@@ -49,12 +49,13 @@ jobs:
             # Suppress stderr and allow failures to handle transition/down periods cleanly
             VERSION_BODY="$(curl -fsS "http://${DEPLOY_HOST}/taxbaik/version.json" 2>/dev/null || true)"
             BLOG_STATUS="$(curl -s -o /dev/null -w '%{http_code}' "http://${DEPLOY_HOST}/taxbaik/blog/accountant-mistakes-5" || true)"
-            if echo "$VERSION_BODY" | grep -q "\"version\": \"${SHORT_VERSION}\"" && [ "$BLOG_STATUS" = "200" ]; then
+            LOGIN_STATUS="$(curl -s -o /dev/null -w '%{http_code}' "http://${DEPLOY_HOST}/taxbaik/admin/login" || true)"
+            if echo "$VERSION_BODY" | grep -q "\"version\": \"${SHORT_VERSION}\"" && [ "$BLOG_STATUS" = "200" ] && [ "$LOGIN_STATUS" = "200" ]; then
               echo "✓ Deployment ready for ${SHORT_VERSION} (attempt $i/20)"
               exit 0
             fi
             if [ $i -lt 20 ]; then
-              echo "  Attempt $i/20: waiting for deployment... (blog=${BLOG_STATUS:-?}, version=${VERSION_BODY:0:30}...)"
+              echo "  Attempt $i/20: waiting for deployment... (blog=${BLOG_STATUS:-?}, login=${LOGIN_STATUS:-?}, version=${VERSION_BODY:0:30}...)"
               sleep 3
             fi
           done
@@ -72,6 +73,23 @@ jobs:
           echo "Running E2E tests on Desktop Chrome (production verification)"
           npx playwright test --project="Desktop Chrome" --reporter=html --reporter=list
 
+      - name: API smoke verification
+        env:
+          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
+          E2E_ADMIN_USERNAME: test_admin
+          E2E_ADMIN_PASSWORD: TestAdmin@123456
+        run: |
+          set -e
+          TOKEN="$(curl -s -X POST "http://${DEPLOY_HOST}/taxbaik/api/auth/login" -H "Content-Type: application/json" -d "{\"username\":\"${E2E_ADMIN_USERNAME}\",\"password\":\"${E2E_ADMIN_PASSWORD}\"}" | python3 -c 'import sys, json; print(json.load(sys.stdin)["accessToken"])')"
+          test -n "$TOKEN"
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/blog/admin?page=1&pageSize=1" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/faq" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/announcement" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/inquiry?page=1&pageSize=1" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/favicon.svg" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/favicon.ico" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/robots.txt" >/dev/null
+
       - name: Browser E2E summary
         if: always()
         run: |