deploy: remove .env from generic file perm check, remove router.php check (dev-only file)

TODO.md

@@ -6,7 +6,8 @@
 - [x] Keep button linking to dedicated tags.php page as backup
 - [x] Add "Annuler" cancel button to both langues and mots-clés bulk action bars
 - [x] Add max-height:50vh + overflow-y:auto to both table wraps
-- [ ] Deploy: just deploy
+- [x] Deploy: just deploy
+- [x] Fix: .env permission check — removed from generic file-perm loop (was expecting 660, but .env is 640)
 
 ## Tmp file cleanup (stale filepond + _trash)
 - [x] Session-based detection: check manifest session_id against PHP session files
@@ -16,7 +17,7 @@
 - [x] admin cleanup-tmp.php: smart cleanup with detailed JSON response
 - [x] admin index: Nettoyer button + dialog with stats and cleanup trigger
 - [x] .gitignore: exclude tmp/filepond/* and tmp/_trash/*
-- [ ] Deploy: just deploy
+- [x] Deploy: just deploy
 
 ## Index page improvements
 - [x] Remove 'Mots-clés' button from toolbar

justfile

@@ -182,7 +182,7 @@ deploy-verify-permissions:
     owner=$(echo "$perms" | awk '{print $2}')
     group=$(echo "$perms" | awk '{print $3}')
     case "$path" in
-    */storage/xamxam.db|*/storage/*.db|*/*/.env)
+    */storage/xamxam.db|*/storage/*.db)
     expected_perm="660" ;;
     *)
     expected_perm="664" ;;
@@ -196,8 +196,6 @@ deploy-verify-permissions:
     fi
     fi
     done < <(printf '%s\n' \
-    "$APP_DIR/.env" \
-    "$APP_DIR/app/router.php" \
     "$APP_DIR/storage/xamxam.db")
 
     # ── var/ subdirectories must be writable ──────────────────────────────────────