Make the time-to-deploy 2x quicker: 2mins vs 4mins

This replaces our Dagger on Fly.io setup with Dagger on Namespace.so

While that was the initial intent, we actually made it 4x quicker:
1min vs 4mins. Also, this is less flaky than Fly.io connectivity from
GitHub Actions Runners. And we don't run **both** the free GitHub
Actions runner for the Dagger CLI, and the Dagger Engine on Fly.io.

We still keep K8s to see if we can improve on Namespace.so, the new
Speed King 🏎️

This is the first part of the required change. The second part will
follow after this gets merged. We need to:
- Cleanup secrets & variables from GitHub Actions
- De-provision the Dagger Engine on Fly.io
- Remove the deploy config from fly.io dir
- Update the INFRASTRUCTURE diagram

Signed-off-by: Gerhard Lazu <[email protected]>

.github/workflows/dagger_on_namespace.yml

@@ -0,0 +1,52 @@
+name: "Dagger on Namespace"
+
+on:
+  workflow_call:
+
+jobs:
+  run:
+    runs-on: namespace-profile-changelog
+    steps:
+      - name: "Checkout code..."
+        uses: namespacelabs/nscloud-checkout-action@v5
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.20"
+          cache-dependency-path: "magefiles/go.sum"
+
+      - name: "Provision Dagger with local cache"
+        run: |
+          docker run \
+            --name dagger-0-6-4 \
+            --detach --restart always \
+            --volume /cache/dagger-0-6-4:/var/lib/dagger \
+            --privileged \
+            registry.dagger.io/engine:v0.6.4
+
+      - name: "Build, test, publish & deploy..."
+        env:
+          IMAGE_OWNER: "${{ vars.IMAGE_OWNER }}"
+          GHCR_USERNAME: "${{ github.actor }}"
+          GHCR_PASSWORD: "${{ secrets.GHCR_PASSWORD }}"
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
+          R2_API_HOST: "${{ secrets.R2_API_HOST }}"
+          R2_ACCESS_KEY_ID: "${{ secrets.R2_ACCESS_KEY_ID }}"
+          R2_SECRET_ACCESS_KEY: "${{ secrets.R2_SECRET_ACCESS_KEY }}"
+          R2_ASSETS_BUCKET: "${{ env.R2_ASSETS_BUCKET }}"
+          OBAN_KEY_FINGERPRINT: "${{ secrets.OBAN_KEY_FINGERPRINT }}"
+          OBAN_LICENSE_KEY: "${{ secrets.OBAN_LICENSE_KEY }}"
+          _EXPERIMENTAL_DAGGER_RUNNER_HOST: "docker-container://dagger-0-6-4"
+        run: |
+          cd magefiles
+          go run main.go -w ../ ci cd
+
+      - name: "Announce deploy in #dev Slack..."
+        if: ${{ github.repository == 'thechangelog/changelog.com' && github.ref_name == 'master' }}
+        uses: rtCamp/action-slack-notify@v2
+        env:
+          MSG_MINIMAL: "commit,actions url"
+          SLACK_CHANNEL: dev
+          SLACK_USERNAME: "GitHub Actions"
+          SLACK_FOOTER: "Just got shipped to https://changelog.com"
+          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/ship_it.yml

@@ -16,28 +16,29 @@ on:
 jobs:
   # In thechangelog/changelog repository (a.k.a. upstream),
   # this is the preferred default:
-  dagger-on-fly:
-    if: ${{ contains(vars.RUNS_ON, 'fly') }}
-    uses: ./.github/workflows/dagger_on_fly.yml
+  dagger-on-namespace:
+    if: ${{ contains(vars.RUNS_ON, 'namespace') }}
+    uses: ./.github/workflows/dagger_on_namespace.yml
     secrets: inherit
 
-  # When our Fly.io setup misbehaves, we want a fallback:
+  # Just in case Namespace.so misbehaves, we want a fallback:
+  # a.k.a. "Always run 2 of everything"
   dagger-on-github-fallback:
-    needs: dagger-on-fly
+    needs: dagger-on-namespace
     if: ${{ failure() }}
     uses: ./.github/workflows/dagger_on_github.yml
     secrets: inherit
 
-  # As forks will not have access to our Fly.io,
-  # we fallback to GitHub default:
-  dagger-on-github:
-    if: ${{ !contains(vars.RUNS_ON, 'fly') }}
-    uses: ./.github/workflows/dagger_on_github.yml
-    secrets: inherit
-
   # This is an experimental job which only runs the CI part of our pipeline.
   # In other words, this does not run CD, it does not deploy our app.
   dagger-on-k8s:
     if: ${{ contains(vars.RUNS_ON, 'k8s') }}
     uses: ./.github/workflows/dagger_on_k8s.yml
     secrets: inherit
+
+  # As forks will not have access to our Namespace.so,
+  # we fallback to GitHub default:
+  dagger-on-github:
+    if: ${{ !contains(vars.RUNS_ON, 'namespace') }}
+    uses: ./.github/workflows/dagger_on_github.yml
+    secrets: inherit