deploy with github actions and require webhook signatures

.all-contributorsrc

@@ -0,0 +1,77 @@
+{
+  "projectName": "github",
+  "projectOwner": "DaleStudy",
+  "commit": true,
+  "repoType": "github",
+  "commitConvention": "angular",
+  "contributors": [
+    {
+      "login": "DaleSeo",
+      "name": "Dale Seo",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5466341?v=4",
+      "profile": "https://daleseo.com",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "soobing",
+      "name": "Soobin Bak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/16860535?v=4",
+      "profile": "https://soobing.github.io/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "sounmind",
+      "name": "Evan Suhyeong Lee",
+      "avatar_url": "https://avatars.githubusercontent.com/u/37020415?v=4",
+      "profile": "https://blog.evanshlee.com",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "devchanki",
+      "name": "Gichan Kim",
+      "avatar_url": "https://avatars.githubusercontent.com/u/31515116?v=4",
+      "profile": "https://github.com/devchanki",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "lkhoony",
+      "name": "KwangHun Lee",
+      "avatar_url": "https://avatars.githubusercontent.com/u/66773320?v=4",
+      "profile": "https://lkhoony.notion.site/Front-End-1a3f0e5e085480668ba0ebc54986f6bc",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "parkhojeong",
+      "name": "Hojeong Park",
+      "avatar_url": "https://avatars.githubusercontent.com/u/34734102?v=4",
+      "profile": "https://github.com/parkhojeong",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jylee2033",
+      "name": "Jooyoung Julia Lee",
+      "avatar_url": "https://avatars.githubusercontent.com/u/85793553?v=4",
+      "profile": "https://github.com/jylee2033",
+      "contributions": [
+        "code"
+      ]
+    }
+  ],
+  "contributorsPerLine": 7,
+  "linkToUsage": false,
+  "files": [
+    "README.md"
+  ]
+}

.github/workflows/deploy.yml

@@ -0,0 +1,42 @@
+name: Deploy 🚀
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-production
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: oven-sh/setup-bun@v2
+
+      - run: bun install --frozen-lockfile
+
+      - run: bun run test
+
+      # PRIVATE_KEY 는 여러 줄짜리 PEM 이라 JSON 으로 쓴다
+      - name: Write secrets file
+        env:
+          PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+          AI_GATEWAY_TOKEN: ${{ secrets.AI_GATEWAY_TOKEN }}
+          INTERNAL_SECRET: ${{ secrets.INTERNAL_SECRET }}
+          WEBHOOK_SECRET: ${{ secrets.WEBHOOK_SECRET }}
+        run: |
+          jq -n --arg private_key "$PRIVATE_KEY" --arg ai "$AI_GATEWAY_TOKEN" --arg internal "$INTERNAL_SECRET" --arg webhook "$WEBHOOK_SECRET" \
+            '{PRIVATE_KEY: $private_key, AI_GATEWAY_TOKEN: $ai, INTERNAL_SECRET: $internal, WEBHOOK_SECRET: $webhook}' > "$RUNNER_TEMP/secrets.json"
+
+      - name: Deploy
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          packageManager: bun
+          command: deploy --secrets-file ${{ runner.temp }}/secrets.json