feat(ci): rework to schedule daily runs after a cron

This prevents us from building and pushing artifacts and replacing then for each run.

Signed-off-by: Noel Georgi <git@frezbo.dev>

Author: frezbo

…kflows/integration-provision-0-cron.yaml .github/workflows/artifacts-cron.yaml.github/workflows/integration-provision-0-cron.yaml renamed to .github/workflows/artifacts-cron.yaml .github/workflows/integration-provision-0-cron.yaml renamed to .github/workflows/artifacts-cron.yaml

@@ -1,14 +1,14 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2026-04-09T14:38:32Z by kres b6d29bf.
+# Generated on 2026-04-15T16:01:10Z by kres b6d29bf-dirty.
 
 concurrency:
   group: ${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 "on":
   schedule:
-    - cron: 30 4 * * *
-name: integration-provision-0-cron
+    - cron: 30 3 * * *
+name: artifacts-cron
 jobs:
   default:
     runs-on:
@@ -51,61 +51,48 @@ jobs:
           driver: remote
           endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234
         timeout-minutes: 10
-      - name: Download artifacts
-        if: github.event_name != 'schedule'
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # version: v8.0.1
-        with:
-          name: talos-artifacts
-          path: _out
-      - name: Fix artifact permissions
-        if: github.event_name != 'schedule'
+      - name: external-artifacts
+        run: |
+          make external-artifacts
+      - name: generate
         run: |
-          xargs -a _out/executable-artifacts -I {} chmod +x {}
-      - name: ci-temp-release-tag
-        if: github.event_name != 'schedule'
+          make generate
+      - name: uki-certs
+        env:
+          PLATFORM: linux/amd64
         run: |
-          make ci-temp-release-tag
+          make uki-certs
       - name: build
-        if: github.event_name == 'schedule'
         env:
           IMAGE_REGISTRY: registry.dev.siderolabs.io
           PLATFORM: linux/amd64,linux/arm64
           PUSH: "true"
         run: |
           make talosctl-linux-amd64 kernel sd-boot sd-stub initramfs installer-base imager talos _out/integration-test-linux-amd64
-      - name: uki-certs
-        if: github.event_name == 'schedule'
-        env:
-          PLATFORM: linux/amd64
-        run: |
-          make uki-certs
       - name: talosctl-cni-bundle
-        if: github.event_name == 'schedule'
         run: |
           make talosctl-cni-bundle
-      - name: images-essential
-        if: github.event_name == 'schedule'
+      - name: iso
         env:
           IMAGE_REGISTRY: registry.dev.siderolabs.io
           IMAGER_ARGS: --extra-kernel-arg=console=ttyS0
           PLATFORM: linux/amd64,linux/arm64
         run: |
-          make images-essential
-      - name: provision-tests-prepare
-        run: |
-          make provision-tests-prepare
-      - name: provision-tests-track-0
+          make iso secureboot-iso
+      - name: images-essential
         env:
-          GRPC_ENFORCE_ALPN_ENABLED: "false"
           IMAGE_REGISTRY: registry.dev.siderolabs.io
+          IMAGER_ARGS: --extra-kernel-arg=console=ttyS0
+          PLATFORM: linux/amd64,linux/arm64
         run: |
-          sudo -E make provision-tests-track-0
+          make images-essential
+      - name: Generate executable list
+        run: |
+          find _out -type f -executable > _out/executable-artifacts
       - name: save artifacts
-        if: always()
         uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # version: v7.0.0
         with:
-          name: talos-logs-integration-provision-0
-          path: |-
-            /tmp/logs-*.tar.gz
-            /tmp/support-*.zip
-          retention-days: "5"
+          name: talos-artifacts
+          path: |
+            _out
+          retention-days: "1"