diff --git a/.gitea/workflows/debug-key.yaml b/.gitea/workflows/debug-key.yaml
new file mode 100644
index 0000000..70d24cd
--- /dev/null
+++ b/.gitea/workflows/debug-key.yaml
@@ -0,0 +1,18 @@
+name: debug-key
+
+on:
+  workflow_dispatch:
+
+jobs:
+  debug:
+    runs-on: deploy
+    steps:
+      - name: Inspect CI_SSH_KEY shape (no secret content exposed)
+        env:
+          CI_SSH_KEY: ${{ secrets.CI_SSH_KEY }}
+        run: |
+          echo "line count: $(printf '%s' "$CI_SSH_KEY" | wc -l)"
+          echo "char count: $(printf '%s' "$CI_SSH_KEY" | wc -c)"
+          printf '%s' "$CI_SSH_KEY" | head -c 30
+          echo
+          printf '%s' "$CI_SSH_KEY" | tail -c 30