ci(docs): unify mkdocs deploy workflows

This also drop insiders auth using public version since insiders features
were merged into the public mkdocs-material package starting with
version 9.7.6 - see: https://squidfunk.github.io/mkdocs-material/blog/2025/11/11/insiders-now-free-for-everyone/

Author: geyslan

.github/workflows/mkdocs-dev.yaml

@@ -0,0 +1,81 @@
+# Deploy Tracee documentation:
+# - on docs changes in main branch -> deploy dev docs
+# - on manual trigger -> deploy either dev or latest docs
+
+name: Deploy documentation
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: Which docs version to deploy
+        required: true
+        default: dev
+        type: choice
+        options:
+          - dev
+          - latest
+      ref:
+        description: Tag/ref to deploy (required for latest, ignored for dev)
+        required: false
+
+  push:
+    paths:
+      - "docs/**"
+      - mkdocs.yml
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  deploy:
+    name: Deploy documentation
+    permissions:
+      contents: write
+    runs-on: ${{ vars.UBUNTU_X86_RUNNER_LABEL || (github.repository_owner == 'aquasecurity' && 'ubuntu-24.04') }}
+    steps:
+      - name: Validate latest input
+        if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'latest' && github.event.inputs.ref == '' }}
+        run: |
+          echo "Input 'ref' is required when target=latest (example: v0.0.1)"
+          exit 1
+
+      - name: Checkout
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          ref: ${{ (github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'latest' && github.event.inputs.ref != '') && github.event.inputs.ref || 'main' }}
+          fetch-depth: 0
+          persist-credentials: true
+
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: 3.12.3
+
+      - name: Install dependencies
+        run: |
+          pip install git+https://github.com/squidfunk/mkdocs-material.git@6c52ed6289b171a153875491f059a94819ec3e10 # 9.7.6
+          pip install git+https://github.com/jimporter/mike.git@6b876a40892f6d16d984247821d5a3ae85745e36 # v2.1.3
+          pip install git+https://github.com/fralau/mkdocs-macros-plugin.git@b906a368ecfd5cd25abcbea0a37f7a23944a8355 # v1.3.7
+
+      - name: Setup Git
+        run: |
+          git config user.name "github-actions"
+          git config user.email "github-actions@github.com"
+
+      - name: Deploy docs
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          TARGET: ${{ github.event.inputs.target }}
+          REF: ${{ github.event.inputs.ref }}
+        run: |
+          set -euo pipefail
+
+          if [ "${EVENT_NAME}" = "push" ] || [ "${TARGET}" = "dev" ]; then
+              mike deploy --push dev
+          elif [ "${TARGET}" = "latest" ]; then
+              VERSION="${REF}"
+              mike deploy --push --update-aliases ${VERSION%.*} latest
+          else
+              echo "Unsupported deploy target: '${TARGET}' for event '${EVENT_NAME}'"
+              exit 1
+          fi