github: Replace firebase-deployment action

Replace firebase-deployment action by hand-crafted make targets. This has
been motivated by an apparently broken firebase-tools release (4 hours
old) that cannot be down-graded when using the firebase GitHub action
and is a blocker. Aside: the foxygoat authors believe it is nice to
stay third-party GitHub action free where possible so that the bulk of
what's run on CI can also be run locally.

Author: juliaogris

.github/workflows/cicd.yaml

@@ -11,6 +11,10 @@ jobs:
     steps:
     - uses: actions/checkout@v2
     - run: ./bin/make ci
+    - run: ./bin/make firebase-deploy
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        FIREBASE_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_EVY_LANG }}
 
   release:
     runs-on: ubuntu-latest
@@ -22,3 +26,6 @@ jobs:
     - run: ./bin/make release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    - run: ./bin/make firebase-deploy-prod
+      env:
+        FIREBASE_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_EVY_LANG }}

.github/workflows/firebase-hosting-merge.yml

@@ -86,12 +86,13 @@ frontend-serve: frontend ## Build frontend and serve on free port
 
 # --- firebase -----------------------------------------------------------------
 CHANNEL ?= dev
+AUTH_CI = $(if $(CI), { printenv FIREBASE_SERVICE_ACCOUNT > out/gac.json; export GOOGLE_APPLICATION_CREDENTIALS=out/gac.json; };)
 
 firebase-deploy-prod: firebase-public ## Deploy to live channel on firebase, use with care!
-	firebase --config firebase/firebase.json deploy
+	$(AUTH_CI) firebase --config firebase/firebase.json deploy
 
 firebase-deploy: firebase-public ## Deploy to dev (or other) channel on firebase
-	firebase --config firebase/firebase.json hosting:channel:deploy $(CHANNEL)
+	$(AUTH_CI) firebase --config firebase/firebase.json hosting:channel:deploy $(CHANNEL)
 
 firebase-emulate: firebase-public ## Run firebase emulator for auth, hosting and datastore
 	firebase --config firebase/firebase.json emulators:start