style(auth): format SSO implementation

.gitea/workflows/ci-cd.yml

@@ -4,7 +4,6 @@ on:
   push:
     branches:
       - dev
-      - ops/sso-main-internal-deploy
       # Add main only after the first manual main restore/rollback drill passes.
   pull_request:
     branches:
@@ -83,9 +82,7 @@ jobs:
     needs: [quality]
     if: >-
       github.event_name != 'pull_request' &&
-      (github.ref == 'refs/heads/dev' ||
+      (github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main')
-       github.ref == 'refs/heads/main' ||
-       github.ref == 'refs/heads/ops/sso-main-internal-deploy')
     outputs:
       celery_ref: ${{ steps.image_refs.outputs.celery_ref }}
       celery_tag_ref: ${{ steps.image_refs.outputs.celery_tag_ref }}
@@ -98,7 +95,6 @@ jobs:
         uses: actions/checkout@v4.2.2
         with:
           persist-credentials: false
-          ref: main
 
       - name: Validate registry credentials
         env:
@@ -137,9 +133,8 @@ jobs:
           registry_path="${REGISTRY_HOST}/${REGISTRY_NAMESPACE}"
           web_image="${registry_path}/${WEB_IMAGE}"
           celery_image="${registry_path}/${CELERY_IMAGE}"
-          source_sha="$(git rev-parse HEAD)"
+          short_sha="$(printf '%s' "${GITHUB_SHA}" | cut -c1-12)"
-          short_sha="$(printf '%s' "${source_sha}" | cut -c1-12)"
+          branch="${GITHUB_REF_NAME}"
-          branch="main"
           immutable_tag="${branch}-${short_sha}"
           build_time="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
 
@@ -153,7 +148,7 @@ jobs:
             --file ./docker/Dockerfile \
             --target runtime-web \
             --build-arg INSTALL_DEV=false \
-            --label "org.opencontainers.image.revision=${source_sha}" \
+            --label "org.opencontainers.image.revision=${GITHUB_SHA}" \
             --label "org.opencontainers.image.source=${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}" \
             --label "org.opencontainers.image.created=${build_time}" \
             --tag "${web_image}:${immutable_tag}" \
@@ -166,7 +161,7 @@ jobs:
             --file ./docker/Dockerfile \
             --target runtime-celery \
             --build-arg INSTALL_DEV=false \
-            --label "org.opencontainers.image.revision=${source_sha}" \
+            --label "org.opencontainers.image.revision=${GITHUB_SHA}" \
             --label "org.opencontainers.image.source=${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}" \
             --label "org.opencontainers.image.created=${build_time}" \
             --tag "${celery_image}:${immutable_tag}" \
@@ -246,9 +241,7 @@ jobs:
     runs-on: [backend-docker]
     timeout-minutes: 60
     needs: [build]
-    if: >-
+    if: needs.build.result == 'success' && github.ref == 'refs/heads/main'
-      needs.build.result == 'success' &&
-      github.ref == 'refs/heads/ops/sso-main-internal-deploy'
 
     steps:
       - name: Checkout