fix(staging): upload latest deploy script via ssh payload (#166)

- replace flaky scp step with base64 payload transfer in the ssh deploy step

- always write latest scripts/stage/deploy.sh to /tmp/deploy.sh before execution

- keep deployment flow explicit: copy script first, then chmod and run

Author: mahiarirani

.github/workflows/staging.yml

@@ -13,18 +13,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Copy staging deploy script
-        uses: appleboy/scp-action@master
-        with:
-          host: ${{ vars.STAGING_SERVER_HOST }}
-          username: ${{ vars.STAGING_SERVER_USER }}
-          key: ${{ secrets.STAGING_SSH_PRIVATE_KEY }}
-          proxy_host: ${{ vars.STAGING_PROXY_HOST }}
-          proxy_username: ${{ vars.STAGING_PROXY_USER }}
-          proxy_key: ${{ secrets.STAGING_PROXY_SSH_PRIVATE_KEY }}
-          source: "scripts/stage/deploy.sh"
-          target: "/tmp"
-          strip_components: 1
+      - name: Prepare staging deploy script payload
+        id: deploy_script
+        run: |
+          SCRIPT_B64="$(base64 < scripts/stage/deploy.sh | tr -d '\n')"
+          echo "script_b64=$SCRIPT_B64" >> "$GITHUB_OUTPUT"
 
       - name: Deploy
         uses: appleboy/ssh-action@master
@@ -38,8 +31,6 @@ jobs:
           script: |
             set -e
             SCRIPT_PATH="/tmp/deploy.sh"
-            if [ ! -f "$SCRIPT_PATH" ]; then
-              SCRIPT_PATH="/tmp/scripts/stage/deploy.sh"
-            fi
+            printf '%s' '${{ steps.deploy_script.outputs.script_b64 }}' | base64 -d > "$SCRIPT_PATH"
             chmod +x "$SCRIPT_PATH"
             bash "$SCRIPT_PATH"