ci/deploy: force rollout of web service via RELEASE_SHA + service update to pick new code

.github/workflows/ci-cd-web-desktop.yml

@@ -73,7 +73,12 @@ jobs:
         if: ${{ hashFiles(format('{0}/stack.yml', env.APP_DIR)) != '' }}
         run: |
           cd "$APP_DIR"
-          docker stack deploy --with-registry-auth -c stack.yml sistema
+          RELEASE_SHA=${{ github.sha }} docker stack deploy --with-registry-auth -c stack.yml sistema
+
+      - name: Ensure web service restarts with new code
+        if: ${{ hashFiles(format('{0}/stack.yml', env.APP_DIR)) != '' }}
+        run: |
+          docker service update --force sistema_web || true
 
   convex_deploy:
     name: Deploy Convex functions

stack.yml

@@ -21,6 +21,8 @@ services:
       NPM_CONFIG_PRODUCTION: "false"
       # Mantém o SQLite fora do repositório
       DATABASE_URL: "file:/app/data/db.sqlite"
+      # Usado para forçar novo rollout a cada deploy (setado pelo CI)
+      RELEASE_SHA: "${RELEASE_SHA:-dev}"
     deploy:
       mode: replicated
       replicas: 1