feat: add GitHub deployment environments for containers, docs, and homebrew (#1424)

* feat: add GitHub deployment environments for containers, docs, and homebrew

* fix: lowercase GHCR owner to satisfy registry naming requirement

github.repository_owner returns 'MFlowCode' (mixed case), but GHCR
requires all-lowercase repository names, causing tag validation errors.
Compute GH_REGISTRY=ghcr.io/${OWNER,,}/mfc in a shell step so the
lowercasing happens at runtime rather than at expression-eval time.

* fix: use DOCKERHUB_USERNAME secret in containers environment URL

Author: sbryngelson

.github/workflows/deploy-tap.yml

@@ -28,6 +28,9 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+    environment:
+      name: homebrew
+      url: https://github.com/MFlowCode/homebrew-mfc
     steps:
       - name: Checkout MFC repository
         uses: actions/checkout@v4

.github/workflows/docker.yml

@@ -71,6 +71,8 @@ jobs:
           fi
           echo "tag=$TAG" >> $GITHUB_OUTPUT
           echo "TAG=$TAG" >> $GITHUB_ENV
+          OWNER="${{ github.repository_owner }}"
+          echo "GH_REGISTRY=ghcr.io/${OWNER,,}/mfc" >> $GITHUB_ENV
           git clone --branch "$BRANCH" --depth 1 ${{ github.server_url }}/${{ github.repository }}.git mfc
 
       - name: Stage
@@ -107,7 +109,7 @@ jobs:
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
           tags: |
             ${{ secrets.DOCKERHUB_USERNAME }}/mfc:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
-            ghcr.io/${{ github.repository_owner }}/mfc:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
+            ${{ env.GH_REGISTRY }}:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
           push: true
 
       - name: Build and push image (gpu)
@@ -129,12 +131,15 @@ jobs:
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
           tags: |
             ${{ secrets.DOCKERHUB_USERNAME }}/mfc:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
-            ghcr.io/${{ github.repository_owner }}/mfc:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
+            ${{ env.GH_REGISTRY }}:${{ env.TAG }}-${{ matrix.config.name }}-${{ matrix.config.runner }}
           push: true
 
   manifests:
     runs-on: ubuntu-latest
     needs: Container
+    environment:
+      name: containers
+      url: https://hub.docker.com/r/${{ secrets.DOCKERHUB_USERNAME }}/mfc
     steps:
       - name: Login to Docker Hub
         uses: docker/login-action@v3
@@ -152,12 +157,17 @@ jobs:
       - name: Setup Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Set GHCR registry (lowercase)
+        run: |
+          OWNER="${{ github.repository_owner }}"
+          echo "GH_REGISTRY=ghcr.io/${OWNER,,}/mfc" >> $GITHUB_ENV
+
       - name: Create and Push Manifest Lists
         env:
           TAG: ${{ needs.Container.outputs.tag }}
           DH: ${{ secrets.DOCKERHUB_USERNAME }}/mfc
-          GH: ghcr.io/${{ github.repository_owner }}/mfc
         run: |
+          GH="${{ env.GH_REGISTRY }}"
           for R in "$DH" "$GH"; do
             docker buildx imagetools create -t $R:$TAG-cpu $R:$TAG-cpu-ubuntu-22.04 $R:$TAG-cpu-ubuntu-22.04-arm
             docker buildx imagetools create -t $R:$TAG-gpu $R:$TAG-gpu-ubuntu-22.04 $R:$TAG-gpu-ubuntu-22.04-arm
@@ -168,8 +178,8 @@ jobs:
         env:
           TAG: ${{ needs.Container.outputs.tag }}
           DH: ${{ secrets.DOCKERHUB_USERNAME }}/mfc
-          GH: ghcr.io/${{ github.repository_owner }}/mfc
         run: |
+          GH="${{ env.GH_REGISTRY }}"
           for R in "$DH" "$GH"; do
             docker buildx imagetools create -t $R:latest-cpu $R:$TAG-cpu-ubuntu-22.04 $R:$TAG-cpu-ubuntu-22.04-arm
             docker buildx imagetools create -t $R:latest-gpu $R:$TAG-gpu-ubuntu-22.04 $R:$TAG-gpu-ubuntu-22.04-arm

.github/workflows/docs.yml

@@ -9,8 +9,8 @@ on:
   pull_request:
 
 jobs:
-  docs:
-    name:    Build & Publish
+  build:
+    name: Build & Verify
     runs-on: ubuntu-latest
 
     steps:
@@ -73,8 +73,25 @@ jobs:
         args: -c .lychee.toml build/install/docs/mfc/
         fail: true
 
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    needs: build
+    if: github.repository == 'MFlowCode/MFC' && github.ref == 'refs/heads/master' && (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
+    environment:
+      name: docs
+      url: https://mflowcode.github.io/
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Download Built Documentation Artifact
+      uses: actions/download-artifact@v4
+      with:
+        name: mfc-docs
+        path: build/install/docs/mfc
+
     - name: Publish Documentation
-      if:   github.repository == 'MFlowCode/MFC' && github.ref == 'refs/heads/master' &&  (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' )
       run:  |
         set +e
         git ls-remote "${{ secrets.DOC_PUSH_URL }}" -q

.github/workflows/homebrew-release.yml

@@ -25,6 +25,9 @@ jobs:
   update-homebrew-tap:
     name: Update homebrew-mfc tap
     runs-on: ubuntu-latest
+    environment:
+      name: homebrew
+      url: https://github.com/MFlowCode/homebrew-mfc
 
     steps:
       - name: Determine version