fix: staging slot disabled until platform team fixes it (#146)

Author: mishraomp

.github/workflows/merge-main.yml

@@ -193,7 +193,7 @@ jobs:
           TF_VAR_oidc_discovery_url: https://loginproxy.gov.bc.ca/auth/realms/standard/.well-known/openid-configuration
           TF_VAR_oidc_client_id: ai-hub-admin-portal-6366
           TF_VAR_oidc_client_secret: ${{ secrets.PORTAL_PROD_OIDC_CLIENT_SECRET }}
-          # Enable staging slot for zero-downtime slot-swap on the P0v4 ASP.
-          TF_VAR_enable_deployment_slot: "true"
+          # Staging slot disabled - blocked by Deny-AppSlots-Public policy (public network access).
+          TF_VAR_enable_deployment_slot: "false"
           PORTAL_NODE_VERSION_FILE: ${{ env.PORTAL_NODE_VERSION_FILE }}
         run: bash ./deploy-terraform.sh apply tools --auto-approve --no-var-file

.github/workflows/portal-deploy.yml

@@ -103,7 +103,7 @@ jobs:
           TF_VAR_sku_name: "P0v4"
           TF_VAR_enable_always_on: "true"
           TF_VAR_app_name_override: "ai-hub-onboarding"
-          TF_VAR_enable_deployment_slot: "true"
+          TF_VAR_enable_deployment_slot: "false"  # Staging slot disabled - blocked by Deny-AppSlots-Public policy
           # Sensitive infra inputs
           # App settings pushed into App Service environment
           TF_VAR_oidc_discovery_url: https://loginproxy.gov.bc.ca/auth/realms/standard/.well-known/openid-configuration