chore(deploy): streamline Fly.io pipeline and harden container build

Signed-off-by: JmPotato <github@ipotato.me>

Author: JmPotato

.dockerignore

@@ -0,0 +1,5 @@
+target/
+.git/
+.github/
+.gitignore
+*.md

.github/workflows/fly-deploy.yml

@@ -1,22 +1,32 @@
 # See https://fly.io/docs/app-guides/continuous-deployment-with-github-actions/
 
-name: Fly.io Demo Deploy
+name: Deploy to Fly.io
 on:
   push:
     branches:
       - main
+
+concurrency:
+  group: deploy
+  cancel-in-progress: true
+
 jobs:
   deploy:
     name: Deploy app
     runs-on: ubuntu-latest
-    concurrency: deploy-group # optional: ensure only one action runs at a time
     steps:
-      - uses: actions/checkout@v4
-      - uses: superfly/flyctl-actions/setup-flyctl@master
-      - env:
+      - uses: actions/checkout@v6
+      - name: Install fly
+        run: |
+          curl -L https://fly.io/install.sh | sh
+          echo "$HOME/.fly/bin" >> "$GITHUB_PATH"
+      - name: Set secrets
+        run: fly secrets set --stage MYSQL_CONNECTION_URL="${MYSQL_CONNECTION_URL}" UMAMI_ID="${UMAMI_ID}"
+        env:
           FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
           MYSQL_CONNECTION_URL: ${{ secrets.MYSQL_CONNECTION_URL }}
           UMAMI_ID: ${{ secrets.UMAMI_ID }}
-        run: |
-          flyctl secrets set --stage MYSQL_CONNECTION_URL=${MYSQL_CONNECTION_URL} UMAMI_ID=${UMAMI_ID}
-          flyctl deploy --remote-only
+      - name: Deploy
+        run: fly deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

.gitignore

@@ -5,7 +5,7 @@ target/
 
 # Remove Cargo.lock from gitignore if creating an executable, leave it for libraries
 # More information here https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
-Cargo.lock
+# Cargo.lock
 
 # These are backup files generated by rustfmt
 **/*.rs.bk