feat(cd): auto-deploy ci-ai-bot on push + dehard-code Jetson URL

- .gitea/workflows/cd.yml: on push to main (bot/** or scripts/**),
  build ci-ai-bot:latest on the Pi runner via DooD and force-recreate
  the container with docker compose (no registry push needed)
- reusable-{ai-review,commands,security}.yml: replace hardcoded
  192.168.178.103:11434 with ${{ vars.JETSON_OLLAMA_URL }} (org variable
  set in conformallab → fallback to old IP if variable is missing)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/reusable-commands.yml

@@ -22,7 +22,8 @@ jobs:
     env:
       AI_PROVIDER: ollama
       AI_MODEL: coder
-      AI_BASE_URL: http://192.168.178.103:11434/v1
+      # JETSON_OLLAMA_URL: org variable in conformallab → Actions → Variables
+      AI_BASE_URL: ${{ vars.JETSON_OLLAMA_URL || 'http://192.168.178.103:11434/v1' }}
       GITEA_TOKEN: ${{ github.token }}
       GITEA_API: https://git.eulernest.eu/api/v1
     steps: