ci: disable auto-trigger on doxygen-pages.yml + perf-compile-time.yml

Both workflows used `push: branches: [main]` and have been firing on
every merge to main since v0.10.0 landed.  Recent runs failed:

  * `doxygen-pages.yml` runs #492/#493/#494 — failed (pages branch
    went into an inconsistent state during the cleanup sequence;
    the workflow's HTTPS push couldn't recover, even though manual
    SSH push from a developer machine could).
  * `perf-compile-time.yml` never ran a clean baseline because the
    same upstream CI-container issue blocks it.

While we work through the root cause, both workflows are restricted
to `workflow_dispatch` (manual only).  Effect:

  * pages-branch stays at its last known-good content; merges to
    main no longer trigger a (currently-failing) republish attempt
  * no false-red CI badges on PRs / commits
  * either workflow can still be fired manually via the Gitea
    Actions UI when needed

Re-enable trick: each file has its old `push:` block commented out;
uncomment when the underlying CI push issue is fixed.

`doc-build.yaml` (Doxygen warning-stats, `continue-on-error: true`)
is unaffected — it does not push anywhere and is intentionally
informational.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

.gitea/workflows/doxygen-pages.yml

@@ -1,4 +1,4 @@
-name: Doxygen → Codeberg Pages
+name: Doxygen → Codeberg Pages (manual-only)
 
 # Auto-publish Doxygen HTML to https://tmoussa.codeberg.page/ConformalLabpp/
 # every time the public API or docs source changes on main.
@@ -6,22 +6,37 @@ name: Doxygen → Codeberg Pages
 # Pattern: mirrors mirror-to-codeberg.yml — reuses the existing
 # CODEBERG_TOKEN secret + HTTPS push.  No new secret setup required.
 #
-# Trigger: push to main that touches code/include/**, Doxyfile, the
+# ─── DISABLED 2026-05-26 ───────────────────────────────────────────────────
-# filter script, doc/**/*.md, README.md, or this workflow file.  Also
+# The auto-publish trigger is intentionally disabled.  Background: the
-# manually triggerable via workflow_dispatch.
+# `pages` branch on codeberg went into an inconsistent state during the
-
+# v0.10.0 PR-merge sequence (the cleanup deleted preview branches and the
+# resulting force-pushes left the pages branch unreachable for the CI's
+# HTTPS push).  Until the underlying push step is verified to work cleanly
+# from CI again, the workflow is restricted to `workflow_dispatch` only —
+# meaning: manual republication via the Gitea Actions UI, no automatic
+# overwrite of the manually-curated pages branch on every main push.
+#
+# The pages branch currently serves the v6 reviewer hub HTML
+# (`doc/reviewer/hub.html` source-of-truth) plus the Doxygen output at
+# /doxygen.html.  Both are stable and survive merges as long as nothing
+# pushes to the pages branch.
+#
+# To re-enable auto-publish later: uncomment the `push:` block below, run
+# a manual dispatch first to verify, then watch a normal merge.
+#
+# on:
+#   push:
+#     branches:
+#       - main
+#     paths:
+#       - "code/include/**"
+#       - "Doxyfile"
+#       - "scripts/doxygen-md-filter.sh"
+#       - "doc/**/*.md"
+#       - "README.md"
+#       - "CLAUDE.md"
+#       - ".gitea/workflows/doxygen-pages.yml"
 on:
-  push:
-    branches:
-      - main
-    paths:
-      - "code/include/**"
-      - "Doxyfile"
-      - "scripts/doxygen-md-filter.sh"
-      - "doc/**/*.md"
-      - "README.md"
-      - "CLAUDE.md"
-      - ".gitea/workflows/doxygen-pages.yml"
   workflow_dispatch: {}
 
 jobs:

.gitea/workflows/perf-compile-time.yml

@@ -20,15 +20,25 @@ name: Compile-time perf bench
 # correctness gate.  Pollutes the summary with timings but does not
 # block merges.
 
+# ─── DISABLED auto-trigger 2026-05-26 ──────────────────────────────────────
+# Same precaution as `.gitea/workflows/doxygen-pages.yml`: while we work
+# through the pages-branch + CI-push issue surfaced during the v0.10.0
+# merge, every workflow that auto-fires on main is restricted to
+# `workflow_dispatch` only.  Manual reruns from the Gitea UI continue
+# to work; transient failures no longer clutter the run history.
+#
+# To re-enable: uncomment the `push:` block below.
+#
+# on:
+#   push:
+#     branches:
+#       - main
+#     paths:
+#       - "code/CMakeLists.txt"
+#       - "code/tests/**/CMakeLists.txt"
+#       - "code/include/**"
+#       - ".gitea/workflows/perf-compile-time.yml"
 on:
-  push:
-    branches:
-      - main
-    paths:
-      - "code/CMakeLists.txt"
-      - "code/tests/**/CMakeLists.txt"
-      - "code/include/**"
-      - ".gitea/workflows/perf-compile-time.yml"
   workflow_dispatch: {}
 
 jobs: