rewrite woodpecker v6

.woodpecker.yml

@@ -10,16 +10,16 @@ clone:
   depth: 50
 
 steps:
-# ─── build & push ──────────────────────────────────────────
+# ── Build & push images ──────────────────────────────
 - name: build-and-push
-  image: docker:24.0-cli          # only the CLI, we re‑use host docker
+  image: docker:24.0-cli           # use host Docker
   privileged: true
   volumes:
-  - name: docker-sock             # mount declared at bottom
+  - name: docker-sock              # mount declared below
     path: /var/run/docker.sock
   commands:
   - |
-    set -e
+    set -eu
     REG=us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo
     TAG=$(echo "$CI_COMMIT_SHA" | head -c 8)
     docker buildx create --use --name woodpecker || true
@@ -31,7 +31,7 @@ steps:
     event: [push, manual]
     branch: [master]
 
-# ─── deploy staging ────────────────────────────────────────
+# ── Deploy to staging ───────────────────────────────
 - name: deploy-staging
   image: appleboy/drone-ssh
   settings:
@@ -52,7 +52,6 @@ steps:
     event: [push, manual]
     branch: [master]
 
-# ─── global volume declaration (list **not** indented) ─────
 volumes:
 - name: docker-sock
   host: