name: Deploy
on:
  push:
    branches: [main]

permissions:
  id-token: write
  contents: read

concurrency:
  group: deploy
  cancel-in-progress: false

jobs:
  deploy:
    # TEMPORARILY DISABLED while the Phase 0–5 stack is merged into main, so each
    # merge to main does NOT trigger `cdk deploy --all`. Re-enable when starting
    # Phase 6 by removing this `if:` line (revert this commit). The pipeline +
    # grafana stacks are already deployed (manually) and validated in prod.
    if: ${{ false }}
    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
    with:
      python-version: "3.12"
      region: us-east-1
      cdk-dir: cdk
    secrets:
      deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}