Merge pull request #392 from co-cddo/chore/ci-lease-lambda-timeout

fix(ci-lease): use dedicated ci-bot ISB user

Author: chrisns

.github/workflows/isb-lease-janitor.yml

@@ -27,10 +27,11 @@ permissions:
   issues: write
 
 env:
-  # Must match the ci_lease_email default in scenario-ci.yml — janitor looks
-  # up leases owned by this email. Future: replace with a dedicated CI user
-  # created via `isb create-user --firstname=CI --lastname=Bot --email=...`.
-  CI_LEASE_EMAIL: chris@cns.me.uk
+  # Must match the ci_lease_email default in scenario-ci.yml — janitor
+  # looks up leases owned by this email. Dedicated CI user, created via
+  # `isb create-user --firstname=NDX --lastname=CI-Bot
+  #   --email=ci-bot@ndx-try.local --preapproved`.
+  CI_LEASE_EMAIL: ci-bot@ndx-try.local
   # 3h: scenario-ci.yml's job timeout is 90m. 3h buffer keeps the janitor
   # from racing an in-flight workflow's own release.
   DEFAULT_OLDER_THAN: '180'

.github/workflows/scenario-ci.yml

@@ -27,10 +27,10 @@ on:
         type: string
         default: empty-sandbox
       ci_lease_email:
-        description: Email associated with the lease. Must be an existing ISB user (ISB API returns 500 if user not found). Default uses an existing operator; for long-term, create a dedicated CI user via `isb create-user`.
+        description: Email associated with the lease. Must be an existing ISB user (ISB API returns 500 if user not found). Created via `isb create-user --firstname=NDX --lastname=CI-Bot --email=ci-bot@ndx-try.local --preapproved`.
         required: false
         type: string
-        default: chris@cns.me.uk
+        default: ci-bot@ndx-try.local
 
 permissions:
   id-token: write