chore: remove Azure Pipelines deployment configuration and add GitHub Actions deployment workflow

Author: frasermolyneux

.azure-pipelines/release-to-production.yml

@@ -21,6 +21,13 @@ This project provides PowerShell automation to obtain and rotate Let's Encrypt S
 2. For each HTTPS binding, issues or renews certs using `New-PACertificate` and `Submit-Renewal` with the Cloudflare DNS plugin.
 3. Binds the latest certificate to each HTTPS binding, optionally removing old certs.
 
+## Deployment
+
+- **CI/CD**: GitHub Actions workflows in `.github/workflows/`.
+  - `deploy-prd.yml` — Deploys to the self-hosted Windows runner (`NS570403`). Triggers on push to `main`, weekly schedule (Thursday 03:00 UTC), and manual dispatch. Uses the `Production` GitHub environment with `CLOUDFLARE_API_KEY` secret (managed by `platform-workloads` Terraform).
+  - `build-and-test.yml` / `pr-verify.yml` — CI validation workflows.
+  - `codequality.yml` — Code quality scanning.
+
 ## Requirements
 
 - Windows Server with IIS and PowerShell 5.1+.

.github/copilot-instructions.md

@@ -0,0 +1,32 @@
+name: Deploy Prd
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+  schedule:
+    - cron: "0 3 * * 4"
+
+permissions: {}
+
+concurrency:
+  group: ${{ github.workflow }}
+
+jobs:
+  deploy-to-vm:
+    runs-on: [self-hosted, windows]
+
+    environment: Production
+
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run certificate rotation
+        shell: pwsh
+        run: |
+          Write-Host "Running on $($env:COMPUTERNAME)"
+          .\rotate-iis-certificates.ps1 -cloudflareApiKey "${{ secrets.CLOUDFLARE_API_KEY }}"

.github/workflows/deploy-prd.yml

@@ -2,6 +2,7 @@
 
 [![Build and Test](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/build-and-test.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/build-and-test.yml)
 [![Code Quality](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/codequality.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/codequality.yml)
+[![Deploy Prd](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/deploy-prd.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/deploy-prd.yml)
 [![Copilot Setup Steps](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/copilot-setup-steps.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/copilot-setup-steps.yml)
 [![Dependabot Auto-Merge](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/dependabot-automerge.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/dependabot-automerge.yml)
 [![PR Verify](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/pr-verify.yml/badge.svg)](https://github.com/frasermolyneux/platform-letsencrypt-iis/actions/workflows/pr-verify.yml)