strip docker type — site-publish is static-content only

Removes type: docker handling from action.yaml, scripts (build/deploy/utils/setup),
and templates (deployment.yaml.j2, service-docker.yaml.j2). Renamed
service-static.yaml.j2 -> service.yaml.j2.

If site.yaml has type: docker, parse_site_yaml() now dies with a clear message
pointing to action/image-build + action/image-push + action/image-deploy with
hand-authored apps-repo manifests. rainsounds.vino.network was the only docker
consumer and has already migrated.

Drops registry-password input from action.yaml (no longer needed).

templates/deployment.yaml.j2

@@ -1,52 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: {{ site_k8s }}
-  namespace: {{ namespace }}
-  labels:
-    app: {{ site_k8s }}
-spec:
-  replicas: {{ replicas }}
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: {{ site_k8s }}
-  template:
-    metadata:
-      labels:
-        app: {{ site_k8s }}
-    spec:
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 65532
-        runAsGroup: 65532
-        fsGroup: 65532
-        seccompProfile:
-          type: RuntimeDefault
-      containers:
-      - name: {{ site_k8s }}
-        image: {{ image }}:latest
-        imagePullPolicy: IfNotPresent
-        ports:
-        - name: http
-          containerPort: {{ port }}
-        resources:
-          requests:
-            memory: 64Mi
-            cpu: 50m
-          limits:
-            memory: 256Mi
-        livenessProbe:
-          httpGet: {path: {{ health_path }}, port: http}
-          periodSeconds: 30
-          timeoutSeconds: 3
-        readinessProbe:
-          httpGet: {path: {{ health_path }}, port: http}
-          periodSeconds: 10
-          timeoutSeconds: 3
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop: ["ALL"]

templates/kustomization.yaml.j2

@@ -1,9 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-{% if site_type == "docker" %}
-- deployment.yaml
-{% endif %}
 - service.yaml
 - ingress.yaml
 - certificate.yaml

templates/service-docker.yaml.j2

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ site_k8s }}
-  namespace: {{ namespace }}
-spec:
-  clusterIP: None
-  selector:
-    app: {{ site_k8s }}
-  ports:
-  - name: http
-    port: 80
-    targetPort: http