always remove the SSH key after a deploy

The clean up step was skipped whenever a transfer failed, leaving the
deploy key on the runner. Run it even when an earlier step fails.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.gitea/workflows/deploy.yml

@@ -31,4 +31,5 @@ jobs:
           scp -i ~/.ssh/id_rsa www/html/wordle/* ${{ vars.REMOTE_USER }}@${{ vars.REMOTE_SERVER }}:/var/www/html/wordle/
 
       - name: Clean up SSH key
+        if: always()  # remove the key even if a transfer failed
         run: rm -rf ~/.ssh