feat(infra): update the deployment script

[Ayush8923]

Summary

Staging Deployment Script

• Starts when Kaapi Guardrails CI finishes on main, not on every push.
• Deploys only when CI passed on a push to main (PR runs are skipped).
• Deploys the exact commit CI tested (git reset --hard <sha> on the server instead of origin/main).
• Can also be run by hand from the Actions tab (workflow_dispatch).
• Waits for the SSM command with aws ssm wait and a 10-minute timeout.
• Posts the deploy result to Discord.

Production Deployment Script

• New verify-ci job: if Kaapi Guardrails CI didn't pass on the tagged commit, the release stops.
• deploy runs only after verify-ci passes.
• Fixed the checkout ref (it used release.tag_name, which is empty when a tag is pushed).
• Waits for the SSM command with aws ssm wait and a 15-minute timeout.
• Posts the deploy result to Discord, with a note when CI blocked the release.

Before submitting a pull request, please ensure that you mark these task.

• Ran fastapi run --reload app/main.py or docker compose up in the repository root and test.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Repository: ProjectTech4DevAI/kaapi-guardrails/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2c9a428f-4f13-4cbf-adc5-75f513b7886c

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}