ci: declare SourceHut source for push builds

ci: enable automatic main-branch deployments

ci: keep Vercel token out of build logs

ci: clone without broken archival submodule

ci: deploy Werc site to Vercel from SourceHut