fix(ci): moves WAF smoke tests to deploy workflow

Author: wgordon17

.github/workflows/ci.yml

@@ -16,10 +16,6 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - run: pnpm run typecheck
       - run: pnpm test
-      - name: WAF smoke tests
-        run: pnpm test:waf
-        env:
-          WAF_BYPASS_TOKEN: ${{ secrets.WAF_BYPASS_TOKEN }}
       - name: Verify CSP hash
         run: node scripts/verify-csp-hash.mjs
       - name: Install Playwright browsers

.github/workflows/deploy.yml

@@ -20,6 +20,10 @@ jobs:
       - run: pnpm test
       - name: Verify CSP hash
         run: node scripts/verify-csp-hash.mjs
+      - name: WAF smoke tests
+        run: pnpm test:waf
+        env:
+          WAF_BYPASS_TOKEN: ${{ secrets.WAF_BYPASS_TOKEN }}
       - run: pnpm run build
         env:
           VITE_GITHUB_CLIENT_ID: ${{ vars.VITE_GITHUB_CLIENT_ID }}