feat(debian): add publish job

Author: endersonmaia

.github/workflows/debian.yml

@@ -159,3 +159,36 @@ jobs:
         with:
           name: signed-artifacts-apt
           path: cdn/apt
+
+  publish:
+    needs: debian-sign
+    #FIXME: uncoment when process is validated
+    #if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+    steps:
+    - name: Checkout gh-pages
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        ref: gh-pages
+
+    - name: Download signed archives
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: signed-artifacts-apt
+        path: incoming/
+
+    - name: Update site
+      run: |
+        cp -vf incoming/stable/* apt/stable/
+        ls -l apt/stable/
+
+    - name: Push to gh-pages
+      run: |
+        cd apt/stable/
+        git config user.name "github-actions[bot]"
+        git config user.email "github-actions[bot]@users.noreply.github.com"
+        git add -A .
+        git diff --staged --quiet || git commit -m "Publish ${{ github.ref_name }}"
+        git push