ci: add production version check for PRs

.gitea/workflows/code-analysis.yml

@@ -34,6 +34,17 @@ jobs:
       - name: Check package.json version changed
         run: scripts/check-package-version-changed.sh origin/main
 
+      - name: Check version against production (PRs only)
+        if: github.event_name == 'pull_request'
+        env:
+          PROD_HOST: ${{ vars.PROD_HOST }}
+          PROD_USER: ${{ vars.PROD_USER }}
+          PROD_PORT: ${{ vars.PROD_PORT }}
+          PROD_SSH_KEY: ${{ secrets.PROD_SSH_KEY }}
+        run: |
+          chmod +x scripts/check-version-against-prod.sh
+          scripts/check-version-against-prod.sh
+
       - name: gitleaks (Secrets Scanning)
         run: |
           # Try to get the latest release asset URL