[NeonTechno]

Summary

• Remove the duplicate GitHub Actions Vercel deploy workflow; Vercel's native Git integration already owns the dr-website, app-portal, and explorer deployments, while the duplicated jobs currently fail and reference project-specific IDs that are not configured as GitHub secrets.
• Make CI meaningful: use Node 22, stop masking lint errors with || true, and build-check the main site, app portal, and explorer.
• Replace the backend test placeholder with a Python syntax validation step.
• Scope Convex deployments to Convex source/config changes and report missing deployment secrets clearly; do not print secret values.
• Fix the exact production build blockers found in Vercel logs: duplicate exports in src/lib/api.ts and src/hooks/useRights.ts, plus the unescaped apostrophe in the portal privacy page.
• Document project roots, secret ownership, deployment flow, and the legacy GitHub environment policy.

Safety

No production domains, Vercel environment values, or existing GitHub environment records were changed. Convex deployment still requires CONVEX_DEPLOY_KEY and CONVEX_DEV_DEPLOY_KEY to be configured by an administrator; the secret values were not available and were not modified.

Validation

GitHub Actions will run on this PR. The existing high-severity npm audit failure is in the separate security workflow and may remain red until dependency vulnerabilities are triaged. API runtime health is a separate outstanding item.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
app-portal	Ready	Preview	Oct 13, 2026 3:56pm UTC
dr-website	Ready	Preview	Oct 13, 2026 3:56pm UTC
drp-web-ecosystem	Error		Oct 13, 2026 3:56pm UTC
explorer	Ready	Preview	Oct 13, 2026 3:56pm UTC