Summary

Moves Vercel deployments from the native Vercel GitHub integration to explicit GitHub Actions workflows, giving us full control over when and how deployments are triggered.

vercel.json disables Vercel's automatic git-based deployments so only the workflows trigger deploys.

Preview workflow (vercel-preview.yml):

• Runs on pull requests; gates deployment on collaborator write access to prevent unauthorized deployments from forks
• Posts a live status comment on the PR (building / ready / failed) with a link to the preview URL
• Sets a stable branch alias (docs-git--authzed.vercel.app) in addition to the per-deploy URL
• Branch name is sanitized and truncated to 46 chars to stay within the 63-char DNS label limit

Production workflow (vercel-production.yml):

• Runs on push to main and supports manual workflow_dispatch
• Creates a GitHub Deployment record and updates its status on success or failure
• Writes a job summary with deployment details

All action references are pinned to commit hashes for supply chain security.

Test plan

• Open a PR as a collaborator -- verify a preview deploy triggers and a status comment appears
• Open a PR as an external contributor -- verify the no-permission comment is posted and no deploy runs
• Merge to main -- verify the production workflow runs and the GitHub Deployment is marked successful

Additional changes:

• Fixed all yamllint warnings and errors across workflow files -- quoted string scalars, added --- document-start
  markers, replaced bare on: with "on": to avoid YAML truthy ambiguity
• Disabled the yamllint comments rule to avoid requiring double-spaces before inline action pin comments (e.g. # v6)
• Removed the Lint Markdown step from the lint workflow -- markdownlint has conflicting rules with oxfmt, which
  already covers formatting checks
• Removed the lint:markdown script from package.json for the same reason; added lint:yaml script to run yamllint
  locally
• Fixed the preview deploy success comment so the "Ready" status links to the workflow run rather than the preview
  URL

Generated with Claude Code