update ci pipeline for deployment
- default ci image is debian stable
- let gitlab-ci deal with submodules via GIT_SUBMODULE_STRATEGY
- use apt setup and pages jobs from tpa templates
- setup pages deployment to avoid MR collisions in main project
this also add a downstream pipeline trigger to build the tpo/web/community website when updates are merged to main