fix(deploy) : correction de deploy

.github/workflows/deploy.yaml

@@ -2,8 +2,8 @@ name: Deploy to Hugging Face
 
 on:
   workflow_run:
-    workflows: ["CI"]
-    branches: [ main ]
+    workflows: ["CI"]          # doit correspondre à name: CI dans ton CI
+    branches: [ main ]         # base branch concernée
     types: [completed]
   workflow_dispatch: {}
 
@@ -14,20 +14,31 @@ concurrency:
 jobs:
   deploy:
     runs-on: ubuntu-latest
-    env:
-      HF_TOKEN: ${{ secrets.HF_TOKEN || '' }}
-      HF_SPACE_URL: ${{ secrets.HF_SPACE_URL || '' }}
+    # ⬇️ NE se lance que si la CI a réussi ET si c'était une CI déclenchée par un PUSH (donc après merge)
+    if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'push' }}
 
-    # déploie seulement si la CI est "success" ET si les secrets existent
-    if: ${{ github.event.workflow_run.conclusion == 'success' && env.HF_TOKEN != '' && env.HF_SPACE_URL != '' }}
+    # on expose les secrets en env (utilisables dans les steps)
+    env:
+      HF_TOKEN: ${{ secrets.HF_TOKEN }}
+      HF_SPACE_URL: ${{ secrets.HF_SPACE_URL }}
+      HF_GIT_EMAIL: ${{ secrets.HF_GIT_EMAIL || 'actions@github.com' }}
+      HF_GIT_NAME:  ${{ secrets.HF_GIT_NAME  || 'github-actions' }}
 
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # garde-fou: si secrets manquants, on sort proprement
+      - name: Guard secrets
+        if: ${{ !env.HF_TOKEN || !env.HF_SPACE_URL }}
+        run: |
+          echo "HF secrets manquants, on skip le déploiement."
+          exit 0
 
       - name: Configure Git
         run: |
-          git config --global user.email "${{ secrets.HF_GIT_EMAIL || 'actions@github.com' }}"
-          git config --global user.name  "${{ secrets.HF_GIT_NAME  || 'github-actions' }}"
+          git config --global user.email "${HF_GIT_EMAIL}"
+          git config --global user.name  "${HF_GIT_NAME}"
           git lfs install
 
       - name: Push to Space