ba62b8e1

By: Michael Lynch <git@mtlynch.io>

Use Fly registry auth for Dockerless deploys

Have the deploy script ask flyctl to mint the short-lived registry credentials that Fly expects, then pass those credentials to Skopeo through a temporary auth file. This keeps the NixCI deploy path Dockerless while avoiding raw token authentication issues against registry.fly.io.

Document the deploy flow, including the Nix-built archive, temporary auth setup, registry push, and final image deploy steps.

Timeline