ci(docs): build docs.qauth.dev on Netlify's own CD, and pin pnpm for it

[EsTharian]

Netlify now builds and deploys the site from main directly, so the GitHub Actions deploy is redundant. This removes it and replaces it with a netlify.toml, which also fixes the two things that made the first Netlify build fail.

The failure

Installing npm packages using pnpm version 10.30.3
ERR_PNPM_UNSUPPORTED_ENGINE  Unsupported environment (bad pnpm and/or Node.js version)
Expected version: >=11.0.0
Got: 10.30.3
Failing build: Failed to install dependencies

The root package.json declares engines.pnpm: ">=11.0.0", but the exact version is pinned only inside each workflow's pnpm/action-setup input — so an external builder has nothing to read it from and Netlify activated its own bundled pnpm. PNPM_VERSION = "11.4.0" is now stated where Netlify looks, matching what .github/workflows/*.yml install.

Deliberately not a packageManager field. Every workflow passes an explicit version: to pnpm/action-setup, so a second declaration would be something to reconcile rather than a pin. Consolidating on packageManager and dropping those three inputs is a reasonable follow-up; it is a larger change than this build needs.

A second failure was queued behind it

The site was configured to publish apps/docs-site/dist. That directory is empty — astro.config.mjs redirects outDir to the workspace-level dist/apps/docs-site so it matches the Nx build target's declared outputs (a declared output that does not match reality breaks Nx caching silently). Once the install was fixed, the deploy would have published nothing and reported success.

Verified by running the configured command against a clean output directory: pnpm exec nx build docs-site lands 120 files in dist/apps/docs-site.

Since netlify.toml overrides the equivalent Netlify UI fields, no dashboard change is required — though the stale publish path is still set there and is worth correcting.

What is removed, and what is not

.github/workflows/docs.yml built the site in Actions and uploaded the prebuilt output through the Netlify CLI, which needed a NETLIFY_AUTH_TOKEN and a NETLIFY_SITE_ID that were never set. It had been failing on every push to main and every pull request.

Its nx test docs-site / nx build docs-site steps are not a loss: ci.yml runs nx affected -t lint typecheck test build, which covers docs-site — its four drift invariants included — whenever the diff touches the project or anything it reads.

Also

apps/docs-site/README.md's deployment section is rewritten to describe Netlify's CD rather than the deleted workflow, and to record why PNPM_VERSION and publish are load-bearing, so the next person to hit either does not have to re-derive it from a build log.

Verification

• nx run-many -t lint typecheck test build across all 26 projects — clean
• nx build docs-site into a cleared dist/apps/docs-site — 120 files, confirming the publish path

🤖 Generated with Claude Code

https://claude.ai/code/session_01TKAC2F5PayPstKTrF2NLp9

---

Generated by Claude Code

[netlify]

✅ Deploy Preview for qauth-docs ready!

Name	Link
🔨 Latest commit	1cd960f
🔍 Latest deploy log	https://app.netlify.com/projects/qauth-docs/deploys/6a8e76f060675c00081e32d3
😎 Deploy Preview	https://deploy-preview-395--qauth-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.