ci(deploy): ensure .well-known dir is uploaded to gh-pages (#2162)

.github/workflows/deploy.yml

@@ -33,9 +33,11 @@ jobs:
         run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
         env:
           JEKYLL_ENV: production
-      - name: Upload artifact
-        # Automatically uploads an artifact from the './_site' directory by default
+      - name: Upload gh-pages artifact
         uses: actions/upload-pages-artifact@v4
+        with:
+          path: _site
+          include-hidden-files: true # required for /.well-known/security.txt
 
   deploy:
     environment:
@@ -46,4 +48,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v4