CI fails when a push to main does not publish. Every run since CI started publishing skipped it because the DEPLOY_SSH_KEY secret was never set, and still showed green, so the site fell behind while each pipeline passed. A missing secret, a failed publish, or missing pipeline variables now fail the Publish step with a line saying why; pull requests, other branches and a superseded build still skip quietly master