chore: use a single deploy workflow template

.github/workflows/check-sample.yml

@@ -3,7 +3,7 @@ name: Check Samples
 on:
   pull_request:
     paths:
-      - 'samples/**'
+      - "samples/**"
 
 jobs:
   check_samples:
@@ -13,19 +13,20 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # Fetch two to see changes in current commit
           fetch-depth: 2
 
-      - name: Install Defang
+      - name: Install Defang (nightly)
         run: |
           eval "$(curl -fsSL s.defang.io/install)"
+        env:
+          DEFANG_INSTALL_VERSION: nightly
 
       - name: Run Checks
         id: checks
         run: |
-          eval "$(curl -fsSL s.defang.io/install)"
           ./scripts/check-sample-files.sh > checklist.txt
           ./scripts/check-modified-samples.sh > modified.txt
           echo "@@ MODIFIED @@"

.github/workflows/publish-sample-template.yml

@@ -1,19 +1,19 @@
 name: Publish Sample Template
 
 on:
-  push: 
+  push:
     branches:
       - main
 
 jobs:
   publish_samples:
     runs-on: ubuntu-latest
-    permissions: 
+    permissions:
       contents: write
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # Fetch two to see changes in current commit
           fetch-depth: 2

.github/workflows/test-scripts.yml

@@ -0,0 +1,68 @@
+name: Test Scripts
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    paths:
+      - "scripts/**"
+      - "templates/**"
+      - "samples/**/compose.yaml"
+      - "samples/**/compose.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "scripts/**"
+      - "templates/**"
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: npm install
+        working-directory: scripts
+
+      - name: Run tests
+        run: npm test
+        working-directory: scripts
+
+  preview-workflows:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: npm install
+        working-directory: scripts
+
+      - name: Get changed samples
+        run: ./scripts/check-modified-samples.sh > modified.txt
+
+      - name: Preview workflows
+        uses: actions/github-script@v7
+        env:
+          DRY_RUN: "true"
+        with:
+          script: |
+            const script = require('./scripts/template-manager.js')
+            await script({github, context, core});

.github/workflows/update-template-workflows.yml

@@ -0,0 +1,37 @@
+name: Update Template Workflows
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "templates/deploy.yaml"
+  workflow_dispatch:
+
+jobs:
+  update_workflows:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: npm install
+        working-directory: scripts
+
+      - name: Update Template Workflows
+        uses: actions/github-script@v7
+        env:
+          PUSH_TOKEN: ${{ secrets.TEMPLATES_MANAGER_TOKEN }}
+        with:
+          github-token: ${{ secrets.TEMPLATES_MANAGER_TOKEN }}
+          script: |
+            const script = require('./scripts/update-template-workflows.js')
+            await script({github, context, core});