refactor: rewrite deploy-gh-pages back to bash

The Node.js rewrite was 325 lines for functionality that fits naturally
in ~289 lines of bash. The deploy script's core job is git operations
(fetch, copy, add, commit, push) which read more naturally in shell.

Changes from the original 88-line script:
- Rebase-based retry replaces sleep-based retry (instant vs 2+ minutes)
- Cleanup of stale PR/branch dirs integrated (was separate workflow step)
- Index regeneration integrated (was in build-orchestrator.js)
- Token auth via http.extraHeader (was in remote URL, leaked in logs)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: themr0c

.github/workflows/build-asciidoc.yml

@@ -74,4 +74,4 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.RHDH_BOT_TOKEN }}
         GITHUB_REPOSITORY: ${{ github.repository }}
-      run: node build/scripts/deploy-gh-pages.js --publish-dir ./titles-generated --message "Deploy ${{ env.GIT_BRANCH }}"
+      run: bash build/scripts/deploy-gh-pages.sh --publish-dir ./titles-generated --message "Deploy ${{ env.GIT_BRANCH }}"

.github/workflows/pr.yml

@@ -195,7 +195,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.RHDH_BOT_TOKEN }}
           GITHUB_REPOSITORY: ${{ github.repository }}
-        run: node trusted-scripts/build/scripts/deploy-gh-pages.js --publish-dir ./pr-content/titles-generated --message "Deploy PR ${{ github.event.number }} preview"
+        run: bash trusted-scripts/build/scripts/deploy-gh-pages.sh --publish-dir ./pr-content/titles-generated --message "Deploy PR ${{ github.event.number }} preview"
 
       # Post one consolidated PR comment with build results, preview link, and CQA checklist.
       # Preview link is always shown; marked stale when title build failed (HTML not generated).

build/scripts/README.md

@@ -8,7 +8,7 @@ Build, deploy, and content quality tooling for the RHDH documentation project.
 |---|---|
 | `build-ccutil.sh` | Wrapper that delegates to `build-orchestrator.js`. Used as a fallback in `pr.yml` on older branches and for local builds. |
 | `build-orchestrator.js` | Parallel documentation build orchestrator. Runs ccutil title builds, lychee link validation, and CQA assessment. Produces `build-report.json`. Supports `--no-cqa` and `--no-lychee` flags to skip phases. |
-| `deploy-gh-pages.js` | Deploys build output to the `gh-pages` branch. Handles cleanup of stale PR/branch directories, index regeneration with release notes links, and retry with rebase on push conflicts. |
+| `deploy-gh-pages.sh` | Deploys build output to the `gh-pages` branch. Handles cleanup of stale PR/branch directories, index regeneration with release notes links, and retry with rebase on push conflicts. |
 | `error-patterns.json` | Regex patterns for classifying ccutil build errors into structured messages with cause and fix fields. |
 | `update-cqa-resources.sh` | Fetches upstream Red Hat style guide resources into `.claude/resources/`. |
 
@@ -29,7 +29,7 @@ See `.claude/plugins/project-cqa/resources/cqa-spec.md` for the full specificati
 
 These scripts are called by GitHub Actions workflows in `.github/workflows/`:
 
-- **`build-asciidoc.yml`** (push to main/release) -- `build-orchestrator.js --no-cqa` + `deploy-gh-pages.js`
-- **`pr.yml`** (pull requests) -- `build-orchestrator.js` (or `build-ccutil.sh` on older branches) + `deploy-gh-pages.js`
+- **`build-asciidoc.yml`** (push to main/release) -- `build-orchestrator.js --no-cqa` + `deploy-gh-pages.sh`
+- **`pr.yml`** (pull requests) -- `build-orchestrator.js` (or `build-ccutil.sh` on older branches) + `deploy-gh-pages.sh`
 
 See `docs/github-publication-workflow.md` for the full architecture documentation.