Gate Render deploy on CI passing via deploy hook

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ppradyoth

.github/workflows/ci.yml

@@ -110,3 +110,18 @@ jobs:
           severity: HIGH,CRITICAL
           exit-code: "1"
           format: table
+
+  # ── Deploy to Render ─────────────────────────────────────────────────────────
+  # Only runs if ALL previous jobs pass. Triggers Render backend deploy via hook.
+  deploy:
+    name: Deploy backend to Render
+    runs-on: ubuntu-latest
+    needs: [backend, frontend, trivy-fs, trivy-image]
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    steps:
+      - name: Trigger Render deploy
+        run: |
+          curl -X POST "${{ secrets.RENDER_DEPLOY_HOOK_URL }}" \
+            --fail \
+            --silent \
+            --show-error