On push to main, SSH (forced-command key) to the tutorials LXC and trigger the host-side tutorials-deploy.service. Key comes from the TUTORIALS_DEPLOY_KEY Actions secret.
Pouya