ci-deploy: drop sudo'd htpasswd step + add playwright browser install

The runner (gitea user) lacks NOPASSWD sudo, so install-htpasswd.sh would
fail in CI. The htpasswd is installed once via setup-pve201.sh and only
changes when basic-auth creds change — re-run setup-pve201.sh by hand if
that happens.

Playwright browsers aren't in the runner image; add an explicit install
step before the e2e runs.

.gitea/workflows/ci-deploy.yml

@@ -72,10 +72,6 @@ jobs:
             -t "flights-web:${GITHUB_SHA:0:7}" \
             .
 
-      - name: Render htpasswd + reload nginx
-        id: htpasswd
-        run: scripts/ci/install-htpasswd.sh
-
       - name: Swap container
         id: swap
         run: scripts/ci/deploy-container.sh swap
@@ -87,6 +83,10 @@ jobs:
           BASIC_AUTH_PASS: ${{ secrets.BASIC_AUTH_PASS }}
         run: scripts/ci/wait-for-url.sh https://ui-dashboard.gnerim.ru/ 30 2
 
+      - name: Install Playwright browsers
+        id: playwright_install
+        run: pnpm exec playwright install chromium
+
       - name: Run Playwright e2e
         id: e2e
         env: