feat: add /api/version endpoint with IMAGE_TAG; validate in ci healthcheck

.forgejo/workflows/deploy.yml

@@ -188,6 +188,13 @@ jobs:
           echo "Properties API: $STATUS"
           [ "$STATUS" = "200" ] || (echo "❌ Properties API falhou ($STATUS)" && exit 1)
 
+      - name: Check deployed version matches image tag
+        run: |
+          RESPONSE=$(curl -s --max-time 10 "https://${{ vars.DOMAIN }}/api/version")
+          echo "Version response: $RESPONSE"
+          echo "$RESPONSE" | grep -q "${{ needs.build.outputs.image_tag }}" \
+            || (echo "❌ Version tag não confere — esperado: ${{ needs.build.outputs.image_tag }}" && exit 1)
+
       - name: All checks passed
         run: |
           echo "✅ Deploy validado com sucesso!"