fix: update deploy and enforcer logic

fix: update deploy and enforcer logic

Author: p-galligan

.github/workflows/automatic-release.yml

@@ -14,4 +14,5 @@ jobs:
   release-please:
     uses: RockefellerArchiveCenter/.github/.github/workflows/automatic-release.yml@base
     with:
-      use-manifest: true
+      use-manifest: true
+    secrets: inherit

.github/workflows/deploy.yml

@@ -4,14 +4,15 @@ on:
   push:
     branches:
       - development
-      - base
+  release:
+    types: [published]
   workflow_dispatch:
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
     environment:
-      name: ${{ github.ref_name }}
+      name: ${{ github.event_name == 'release' && 'base' || github.ref_name }}
 
     env:
       APPLICATION_NAME: aurora

.github/workflows/enforcer.yml

@@ -1,16 +1,14 @@
-name: 'Check Branch'
+name: Check Branch
 
 on:
   pull_request:
     branches:
       - base
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
-  check_branch:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check branch
-        if: github.head_ref != 'development'
-        run: |
-          echo "ERROR: You can only merge to base from the development branch."
-          exit 1
+  enforcer:
+    uses: RockefellerArchiveCenter/.github/.github/workflows/enforcer.yml@base