fix(packaging/deb): build the CLI the client .deb installs

With the client crates compiling again, deb got as far as "Build .debs" and died
on `install: No such file or directory` — a confusing way to report that
punktfunk-cli was never built.

Two halves of the same omission, from when the `punktfunk` CLI was added. deb.yml
pre-builds `-p punktfunk-client-linux -p punktfunk-client-session` and stops
there, while build-client-deb.sh installs THREE binaries. Its build-if-missing
guard tested only the first two, so the pre-built pair satisfied it, the fallback
build (which does list punktfunk-cli) was skipped, and the install of a binary
nobody had built failed.

deb.yml now builds all three, and the guard tests every binary it goes on to
install rather than a subset — either change alone fixes it; both together mean
the script is correct however it is called. That asymmetry is also why the arm64
leg passed throughout: it pre-builds nothing, so its guard always fired and built
all three.

arch was already right (`-p punktfunk-cli` in its PKGBUILD, installed at line 255)
and the rpm spec ships no CLI, so this was deb-only.

Verified: guard truth-tabled (skip when all three present, BUILD when the CLI is
missing, BUILD when nothing is), shellcheck clean, and punktfunk-cli builds to
target/release/punktfunk on a real Linux box.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

.gitea/workflows/deb.yml

@@ -110,10 +110,15 @@ jobs:
           PUNKTFUNK_BUILD_VERSION: ${{ env.VERSION }}   # stamped into the binaries (build.rs)
         run: |
           git config --global --add safe.directory "$PWD"
-          # punktfunk-client-session is the Vulkan/Skia streamer the shell execs for a connect —
-          # both client binaries must ship (build-client-deb.sh installs both). The HOST is built
-          # separately in the build-publish-host job (Ubuntu 24.04 image + bundled FFmpeg 8).
-          cargo build --release --locked -p punktfunk-client-linux -p punktfunk-client-session
+          # THREE binaries ship in the client .deb, so all three are built here: the GTK shell,
+          # punktfunk-client-session (the Vulkan/Skia streamer the shell execs for a connect), and
+          # punktfunk-cli (the headless `punktfunk` front-end). build-client-deb.sh installs all
+          # three; leaving punktfunk-cli out here made it fall over on `install: No such file or
+          # directory`, because its build-if-missing guard only tested the first two and so decided
+          # everything was already built. The HOST is built separately in the build-publish-host
+          # job (Ubuntu 24.04 image + bundled FFmpeg 8).
+          cargo build --release --locked \
+            -p punktfunk-client-linux -p punktfunk-client-session -p punktfunk-cli
 
       - name: Build + smoke-boot web console (bun preset)
         # Gate the .deb on a real bun boot: the punktfunk-web .deb runs the Nitro `bun` preset