diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 6bbefb9..3598a08 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -14,18 +14,13 @@ jobs:
       - name: 检出代码
         uses: actions/checkout@v4
 
-      # 不用 setup-uv：它要从 github.com 拉 uv 二进制与 CPython——runner
-      # 主机对 github 的连通性不可靠（见 probe.yml 探测）。改走 pip/tuna
-      # 装 uv，CPython 走 npmmirror 的 python-build-standalone 镜像，
-      # 包索引走 tuna。
+      # runner 出网探测显示 github/pypi 均可达（见 probe.yml），无需镜像：
+      # pip 从 pypi 装 uv，uv sync 自取 CPython 与依赖
       - name: 安装 uv
-        run: pip install -i https://pypi.tuna.tsinghua.edu.cn/simple uv
+        run: pip install uv
 
       - name: 同步依赖（含 dev 组）
         run: uv sync
-        env:
-          UV_DEFAULT_INDEX: https://pypi.tuna.tsinghua.edu.cn/simple
-          UV_PYTHON_INSTALL_MIRROR: https://registry.npmmirror.com/-/binary/python-build-standalone
 
       - name: ruff 静态检查
         run: uv run ruff check src tests examples
diff --git a/.gitea/workflows/deploy-docs.yml b/.gitea/workflows/deploy-docs.yml
index dba2a9b..f23a3bf 100644
--- a/.gitea/workflows/deploy-docs.yml
+++ b/.gitea/workflows/deploy-docs.yml
@@ -22,6 +22,22 @@ jobs:
       - name: 检出代码
         uses: actions/checkout@v4
 
+      # 日志匿名不可读：把 secrets 在场情况写进 commit status 便于远程
+      # 排查（只报 set/MISSING，不泄露值）
+      - name: 探测 secrets 是否配置
+        env:
+          TOKEN: ${{ secrets.GITEA_TOKEN }}
+          CF_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CF_ACCOUNT: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+        run: |
+          SERVER="${GITHUB_SERVER_URL:-https://gitea.4i.hk}"
+          s() { [ -n "$2" ] && echo set || echo MISSING; }
+          curl -s -m 10 -X POST \
+            -H "Authorization: token $TOKEN" \
+            -H 'Content-Type: application/json' \
+            -d "{\"state\":\"success\",\"context\":\"deploy/secrets\",\"description\":\"CLOUDFLARE_API_TOKEN=$(s x "$CF_TOKEN") CLOUDFLARE_ACCOUNT_ID=$(s x "$CF_ACCOUNT")\"}" \
+            "$SERVER/api/v1/repos/$GITHUB_REPOSITORY/statuses/$GITHUB_SHA" -o /dev/null
+
       - name: 组装并部署（wrangler Direct Upload）
         run: bash scripts/deploy_docs.sh
         env: