_git-deploy.php: deploy runs on POST only (browser uses GET, so nothing is pulled). GitHub webhooks use POST automatically. Manual test: curl -X POST "https://www.larabis.rejoice.im/_git-deploy.php?token=YOUR_DEPLOY_WEBHOOK_SECRET"