ci(release): publish latest.json when ANY platform build succeeds

Previously the manifest job had `needs: build` (no `if`), so if any
matrix entry failed (e.g. macOS missing certs, Linux apt drift) the
manifest never ran and the in-app updater on already-installed
machines never saw the new version — even though a perfectly good
Windows installer was attached to the release.

- `if: !cancelled()` lets the manifest step run as long as the run
  isn't manually cancelled.
- The merge step now exits cleanly (without writing latest.json) when
  zero platform manifests were downloaded OR the merged result has
  zero platforms, so we never push an empty `platforms: {}` to the
  site (which would be worse than leaving it stale).
- The downstream checkout / copy / commit steps are gated on
  `has_manifest == 'true'`.
- Corrected the destination path on flaredeck-dev: the monorepo's
  website public dir is at `apps/website/public/latest.json`, not the
  repo root `public/`.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: milzamsz

.github/workflows/release.yml

@@ -85,7 +85,13 @@ jobs:
 
   manifest:
     name: Update latest.json on flaredeck-web
+    # Run as long as the workflow wasn't cancelled. Even if some platform
+    # builds failed (e.g. macOS missing certs, Linux apt deps drift),
+    # we still want to publish the platforms that DID ship — a
+    # Windows-only release is still useful, and installed users on any
+    # other OS just stay on their current version until the next tag.
     needs: build
+    if: ${{ !cancelled() }}
     runs-on: ubuntu-latest
     steps:
       - name: Resolve tag
@@ -109,11 +115,16 @@ jobs:
           ls -la artifacts
 
       - name: Merge per-platform manifests
+        id: merge
         run: |
           node -e '
             const fs = require("node:fs");
             const path = require("node:path");
             const files = fs.readdirSync("artifacts").filter(f => f.endsWith(".json"));
+            if (files.length === 0) {
+              console.log("No platform manifests found in artifacts/. Skipping latest.json update.");
+              process.exit(0);
+            }
             const merged = { version: "", notes: "", pub_date: new Date().toISOString(), platforms: {} };
             for (const f of files) {
               const data = JSON.parse(fs.readFileSync(path.join("artifacts", f), "utf8"));
@@ -122,33 +133,45 @@ jobs:
               if (data.pub_date) merged.pub_date = data.pub_date;
               if (data.platforms) Object.assign(merged.platforms, data.platforms);
             }
+            if (Object.keys(merged.platforms).length === 0) {
+              console.log("Merged manifest has no platforms. Skipping latest.json update.");
+              process.exit(0);
+            }
             fs.writeFileSync("latest.json", JSON.stringify(merged, null, 2));
-            console.log(merged);
+            console.log(JSON.stringify(merged, null, 2));
           '
+          if [ -f latest.json ]; then
+            echo "has_manifest=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "has_manifest=false" >> "$GITHUB_OUTPUT"
+          fi
 
       - name: Checkout flaredeck-web
+        if: steps.merge.outputs.has_manifest == 'true'
         uses: actions/checkout@v4
         with:
-          repository: ${{ secrets.WEB_REPO }}        # e.g. milzamsz/flaredeck-web
+          repository: ${{ secrets.WEB_REPO }}        # e.g. milzamsz/flaredeck-dev
           token: ${{ secrets.WEB_REPO_PAT }}         # PAT with `contents:write` on the web repo
           path: web
 
       - name: Copy latest.json into the web repo
+        if: steps.merge.outputs.has_manifest == 'true'
         run: |
           set -e
-          mkdir -p web/public
-          cp latest.json web/public/latest.json
+          mkdir -p web/apps/website/public
+          cp latest.json web/apps/website/public/latest.json
 
       - name: Commit and push
+        if: steps.merge.outputs.has_manifest == 'true'
         working-directory: web
         run: |
           set -e
           git config user.name "flaredeck-releaser"
           git config user.email "releaser@flaredeck.com"
-          if git diff --quiet public/latest.json; then
+          if git diff --quiet apps/website/public/latest.json; then
             echo "No change to latest.json — skipping commit."
             exit 0
           fi
-          git add public/latest.json
+          git add apps/website/public/latest.json
           git commit -m "release: update latest.json for ${{ steps.tag.outputs.tag }}"
           git push