feat: persist cdn/apt in git lfs cdn branch

Author: endersonmaia

.github/workflows/debian.yml

@@ -31,7 +31,6 @@ jobs:
       - name: Setup up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
-
       - name: Make builder container image
         uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
@@ -183,13 +182,37 @@ jobs:
     permissions:
       pages: write
       id-token: write
+      contents: write
     steps:
+      - name: Checkout git persisted cdn/apt/ artifacts
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: cdn
+          path: cdn
+          lfs: true
+          sparse-checkout: |
+            apt
+
       - name: Download signed archives
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: signed-artifacts-apt
           path: _site/
 
+      - name: Sync cdn/apt and _site/apt
+        run: |
+          cp -vrn cdn/apt/* _site/apt/
+          cp -vr _site/apt/* cdn/apt/
+
+      - name: Persist packages into git cdn
+        run: |
+          cd cdn/apt/
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add --sparse keys/ stable/
+          git diff --staged --quiet || git commit -m "Update cdn/apt ${{ github.ref_name }}"
+          git push origin cdn
+
       - name: Create GPG Public Key from variable
         env:
           DEB_PUB_KEY: ${{ vars.DEB_PUB_KEY }}