Merge staging to main (#68)

* add gitleaks pre-commit hook

* feat: use on chain staking params for locked token APR multiplier (#61)

* added github workflows for docker image build and push to ECR (#63)

* refactor: migrate CI/CD to reusable workflow with multi-env deploy

- Replace inline ECR build + story-helm tag update with centralized
  reusable workflow from gha-workflows
- Deploy to both staking-aeneid and staking-mainnet paths
- Support staging (staging branch) and prod (main branch) environments
- Remove old aws-reusable-helm-tag-update.yml (absorbed into reusable)

* chore: remove legacy GCP CD workflow

GCP infrastructure has been migrated to AWS. The aws-cd.yml workflow
now handles all build and deploy operations.

* Revert "chore: remove legacy GCP CD workflow"

This reverts commit 2e7aa96.

* Revert "refactor: migrate CI/CD to reusable workflow with multi-env deploy"

This reverts commit c18a689.

* Revert "added github workflows for docker image build and push to ECR (#63)"

This reverts commit 9494cf1.

* feat: migrate CD pipeline to reusable build-and-deploy workflow (#67)

- Replace legacy GCP workflow with reusable-build-and-deploy
- Deploy to 4 environments: staging/prod x aeneid/mainnet
- Add workflow_dispatch for manual trigger support
- Use STORY_DEPLOYMENTS_PUSH_TOKEN for cross-org deployment

---------

Co-authored-by: Vinod Tiwari <vinod.tiwari@piplabs.xyz>
Co-authored-by: Hans Lee <38912532+0xHansLee@users.noreply.github.com>
Co-authored-by: muharrem <117837391+muharrem-avahitech@users.noreply.github.com>

Author: 4 people

.github/workflows/cd.yml

@@ -1,40 +1,22 @@
-name: Build and Push Staking-api Image
+name: Build and Deploy Staking API
 
 on:
   push:
     branches:
-      - 'staging'
-      - 'main'
+      - staging
+      - main
+  workflow_dispatch:
 
 jobs:
-  define-params:
-    runs-on: ubuntu-latest
-    outputs:
-      app_name: staking-api
-      k8s_ns: staking
-      image_tag: ${{ github.sha }}
-      target_environment: ${{ (github.ref_name == 'main') && 'production' || 'staging' }}
-    steps:
-      - run: echo "Exposing target environment"
-
-  image-build:
-    needs: define-params
-    uses: storyprotocol/gha-workflows/.github/workflows/reusable-gcp-image-build-worker.yml@main
+  build-and-deploy:
+    uses: storyprotocol/gha-workflows/.github/workflows/reusable-build-and-deploy.yml@main
     with:
-      app_name: ${{ needs.define-params.outputs.app_name }}
-      k8s_ns: ${{ needs.define-params.outputs.k8s_ns }}
-      target_environment: ${{ needs.define-params.outputs.target_environment }}
-      image_tag: ${{ needs.define-params.outputs.image_tag }}
-      dockerfile_path: "./Dockerfile"
-      dockerfile_context: "."
-    secrets: inherit
-
-  request-app-release:
-    needs: [ define-params, image-build ]
-    uses: storyprotocol/gha-workflows/.github/workflows/reusable-gcp-app-release-publisher.yml@main
-    with:
-      app_name: ${{ needs.define-params.outputs.app_name }}
-      k8s_ns: ${{ needs.define-params.outputs.k8s_ns }}
-      target_environment: ${{ needs.define-params.outputs.target_environment }}
-      image_tag: ${{ needs.define-params.outputs.image_tag }}
-    secrets: inherit
+      app_name: staking-api
+      dockerfile: ./Dockerfile
+      deploy_env: ${{ github.ref_name == 'main' && 'prod' || 'stage' }}
+      deploy_paths: |
+        staking-aeneid/staking-api-aeneid
+        staking-mainnet/staking-api-mainnet
+    secrets:
+      AWS_ROLE_ARN: ${{ github.ref_name == 'main' && vars.AWS_GITHUB_ROLE_ARN_PROD || vars.AWS_GITHUB_ROLE_ARN }}
+      DEPLOY_TOKEN: ${{ secrets.STORY_DEPLOYMENTS_PUSH_TOKEN }}