3b7b2b346f
Adds a deploy job that runs after Docker images are pushed to GHCR. It checks out groombook/infra, updates all image SHA tags in the Kubernetes manifests, and commits directly to main. This ensures Flux always picks up new images after a successful build, preventing the previous issue where :latest tags caused no manifest diff and pods weren't updated. Requires INFRA_DEPLOY_TOKEN secret with push access to groombook/infra. Co-authored-by: Groom Book CTO <cto@groombook.dev> Co-authored-by: Paperclip <noreply@paperclip.ing>