fix(ci): install ripgrep in deploy workflow qa step

Same fix as qa-required.yaml — css-contract-check.sh calls rg on
the host runner, not inside Docker.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/workflows/deploy.yaml

@@ -30,6 +30,9 @@ jobs:
       - name: Run DB migrations
         run: docker compose exec -T php php bin/console db:migrate
 
+      - name: Install ripgrep
+        run: sudo apt-get install -y ripgrep
+
       - name: Run required QA gates
         run: bin/qa-required.sh