moved SSH back to top

.woodpecker.yml

@@ -108,6 +108,14 @@ steps:
         - bash
         - -c
         - |
+
+        -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \
+             --project=aptivaai-prod --zone=us-central1-a \
+             --listen-on-stdin --verbosity=error" \
+             -o StrictHostKeyChecking=accept-new \
+             -i ~/.ssh/id_ed25519 \
+             "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG"
+
           set -euo pipefail
           [[ "${PROMOTE:-}" == "prod" ]] || { echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; }
 
@@ -185,14 +193,6 @@ steps:
             docker compose up -d --force-recreate --remove-orphans
 
           echo "✅ Prod stack refreshed with tag $IMG_TAG"
-          ' | ssh -T \
-            -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \
-            --project=aptivaai-prod --zone=us-central1-a \
-            --listen-on-stdin --verbosity=error" \
-            -o StrictHostKeyChecking=accept-new \
-            -i ~/.ssh/id_ed25519 \
-            "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG"
-
           
     secrets:
       - PROD_SSH_KEY