deployerbot: upgrade before deploys

modules/services/deployerbot/default.nix

@@ -84,6 +84,8 @@ in {
             fi
 
             nix flake update --accept-flake-config --commit-lock-file
+            nix flake check
+            git push origin main
 
             ${pkgs.deploy-rs.deploy-rs}/bin/deploy \
               --ssh-opts="-i ''${CREDENTIALS_DIRECTORY}/ssh-key" \
@@ -96,9 +98,6 @@ in {
             EXITCODE=0
             ${lib.concatLines (map mkOptional cfg.deployIfPresent)}
 
-            # done
-            git push origin main
-
             exit $EXITCODE
           '';
         };