ci(docs-bundle): publish the tarball from the docs publishing workflow

The tarball and the Meilisearch index are both copies of the same docs for
AI Q&A, so they are now two jobs of one workflow (upload.yml, renamed
"Publish docs for AI search") instead of two workflow files. It runs on the
union of the paths either copy depends on; a Meilisearch sync with no doc
changes re-embeds nothing.

The bundle job runs the bundle tests, then builds and uploads the tarball to
/docs (production) or /test/docs (development), with its own concurrency
group so a newer run cancels an older one. A manual run of the workflow for
an environment now refreshes both copies.

Author: ysyneu

.github/workflows/docs-bundle-upload.yml

@@ -1,7 +1,9 @@
-# Upload documentation to Meilisearch for AI Q&A bot indexing.
+# Publish the docs for AI Q&A: sync them into Meilisearch, and publish
+# flashduty-docs.tar.gz (the same docs as Markdown files, plus the OpenAPI
+# specs and glossary) for tools that grep and read the docs directly.
 #
-# Every run syncs the whole doc set: all docs are upserted and index documents
-# whose source file is gone are deleted.
+# The Meilisearch sync covers the whole doc set: all docs are upserted and
+# index documents whose source file is gone are deleted.
 #
 # Uses GitHub Environments for dev/prod separation. Create two environments in
 # Settings > Environments: "development" and "production".
@@ -10,10 +12,13 @@
 #   MEILI_ENDPOINT  - Meilisearch instance URL
 #   MEILI_API_KEY   - API key with documents read/write permission
 #   MEILI_INDEX     - Target index name
+# Repository secrets for the tarball: CDN_ACCESS_KEY, CDN_SECRET_KEY,
+# CDN_BUCKET, CDN_REGION, CDN_ENDPOINT.
 #
-# Branch mapping: main -> production, test -> development
+# Branch mapping: main -> production (https://docs-cdn.flashcat.cloud/docs/),
+# test -> development (https://docs-cdn.flashcat.cloud/test/docs/)
 
-name: Upload docs to Meilisearch
+name: Publish docs for AI search
 
 on:
   push:
@@ -22,6 +27,13 @@ on:
       - 'zh/**'
       - 'en/**'
       - 'docs.json'
+      - 'api-reference/**'
+      - 'glossary.md'
+      - 'integration-docs/scripts/*docs-bundle*'
+      - 'integration-docs/scripts/oss-cdn.mjs'
+      - 'integration-docs/scripts/cdn-url.mjs'
+      - 'integration-docs/package.json'
+      - '.github/workflows/upload.yml'
   workflow_dispatch:
     inputs:
       environment:
@@ -60,3 +72,40 @@ jobs:
         run: |
           chmod +x ./scripts/upload.sh
           bash ./scripts/upload.sh
+
+  bundle:
+    runs-on: ubuntu-latest
+    environment: ${{ github.event.inputs.environment || (github.ref == 'refs/heads/main' && 'production' || 'development') }}
+    # Every run uploads the whole tarball, so a newer run supersedes an older
+    # one; cancelling the older keeps it from finishing last with stale docs.
+    concurrency:
+      group: docs-bundle-${{ github.event.inputs.environment || (github.ref == 'refs/heads/main' && 'production' || 'development') }}
+      cancel-in-progress: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 18
+
+      - name: Install dependencies
+        working-directory: integration-docs
+        run: npm install
+
+      - name: Test docs bundle scripts
+        working-directory: integration-docs
+        run: npm run test:docs-bundle
+
+      - name: Build and upload docs bundle
+        working-directory: integration-docs
+        env:
+          CDN_ACCESS_KEY: ${{ secrets.CDN_ACCESS_KEY }}
+          CDN_SECRET_KEY: ${{ secrets.CDN_SECRET_KEY }}
+          CDN_BUCKET: ${{ secrets.CDN_BUCKET }}
+          CDN_REGION: ${{ secrets.CDN_REGION }}
+          CDN_ENDPOINT: ${{ secrets.CDN_ENDPOINT }}
+          CDN_URL: 'https://docs-cdn.flashcat.cloud'
+          CDN_DIR: ${{ (github.event.inputs.environment || (github.ref == 'refs/heads/main' && 'production' || 'development')) == 'production' && '/docs' || '/test/docs' }}
+        run: npm run upload:docs-bundle