perf: security improvements to upload workflow

.github/workflows/main.yml

@@ -27,25 +27,25 @@ jobs:
       run: |
         source /home/runner/.nix-profile/etc/profile.d/nix.sh
         nix develop --extra-experimental-features nix-command --command website
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-    - name: Ensure result directory exists and set permissions
+    - name: Set directory permissions for FTP Deploy
       run: |
-        mkdir -p result/
-        chmod -R 777 result/
+        chmod -R 755 result/
 
     - name: Deploy to FTP server
-      uses: SamKirkland/FTP-Deploy-Action@4.3.0
+      uses: SamKirkland/FTP-Deploy-Action@v4.3.5
       with:
         server: ${{ secrets.FTP_SERVER }}
         username: ${{ secrets.FTP_USERNAME }}
         password: ${{ secrets.FTP_PASSWORD }}
         local-dir: result/
-        server-dir: ./
-        protocol: ftp
+        server-dir: website/
+        state-name: ../.ftp-deploy-sync-state.json
+        protocol: ftps
+        security: strict
         exclude:  |
           **/kaffeepause/**
           **/whitepaper/**
           **/scss/main.css
-          **/scss/main.css.map
+          **/scss/main.css.map
+