modify pipeline to speed up deployment

scripts/deploy/create-npmrc.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+# Create .npmrc_temp and .npmrc for Docker BuildKit / compose secrets.
+# Requires NPM_TOKEN in the environment.
+
+set -euo pipefail
+
+if [[ -z "${NPM_TOKEN:-}" ]]; then
+  echo "NPM_TOKEN is not set" >&2
+  exit 1
+fi
+
+cat <<EOF > .npmrc_temp
+@tria-plc:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${NPM_TOKEN}
+always-auth=true
+EOF
+
+cp .npmrc_temp .npmrc
+echo "Created .npmrc_temp and .npmrc for private @tria-plc packages"

scripts/deploy/sync-env-from-server.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+# Sync .env files from the self-hosted runner filesystem into the repo.
+#
+# Usage:
+#   PROJECT=edr-freight BRANCH=main ./scripts/deploy/sync-env-from-server.sh freight-api freight-portal freight-backoffice
+#
+# Server layout (one file per service):
+#   /home/user/environmen/<project>/<branch>/freight-api.env
+#   /home/user/environmen/<project>/<branch>/freight-portal.env
+#   /home/user/environmen/<project>/<branch>/freight-web.build.env  (optional, exports VITE_API_URL etc.)
+
+set -euo pipefail
+
+DEPLOY_USER="${DEPLOY_USER:-tria}"
+ENV_ROOT="${ENV_ROOT:-/home/${DEPLOY_USER}/environmen/${PROJECT:?PROJECT is required}/${BRANCH:?BRANCH is required}}"
+
+if [[ ! -d "${ENV_ROOT}" ]]; then
+  echo "Environment directory not found: ${ENV_ROOT}" >&2
+  exit 1
+fi
+
+echo "Using environment directory: ${ENV_ROOT}"
+
+declare -A SERVICE_ENV_TARGET=(
+  ["freight-api"]="apps/edr-freight-api/.env"
+  ["freight-portal"]="apps/edr-freight-web/portal/.env"
+  ["freight-backoffice"]="apps/edr-freight-web/backoffice/.env"
+  ["passenger-api"]="apps/edr-passenger-api/.env"
+  ["passenger-portal"]="apps/edr-passenger-web/portal/.env"
+  ["passenger-backoffice"]="apps/edr-passenger-web/backoffice/.env"
+)
+
+for service in "$@"; do
+  src="${ENV_ROOT}/${service}.env"
+  dest="${SERVICE_ENV_TARGET[${service}]:-}"
+
+  if [[ -z "${dest}" ]]; then
+    echo "Unknown service: ${service}" >&2
+    exit 1
+  fi
+
+  if [[ ! -f "${src}" ]]; then
+    echo "Missing env file: ${src}" >&2
+    exit 1
+  fi
+
+  mkdir -p "$(dirname "${dest}")"
+  cp "${src}" "${dest}"
+  echo "Synced ${src} -> ${dest}"
+done
+
+# Optional build-time variables (VITE_API_URL, etc.)
+# Set BUILD_ENV_FILE=freight-web.build.env or passenger-web.build.env per workflow.
+build_env_file="${BUILD_ENV_FILE:-web.build.env}"
+build_env="${ENV_ROOT}/${build_env_file}"
+if [[ -f "${build_env}" ]]; then
+  echo "Loading build variables from ${build_env}"
+  set -a
+  # shellcheck disable=SC1090
+  source "${build_env}"
+  set +a
+
+  if [[ -n "${GITHUB_ENV:-}" ]]; then
+    grep -E '^[[:space:]]*export[[:space:]]+[A-Za-z_][A-Za-z0-9_]*=' "${build_env}" \
+      | sed -E 's/^[[:space:]]*export[[:space:]]+//' >> "${GITHUB_ENV}"
+    echo "Wrote build variables to GITHUB_ENV"
+  fi
+fi