Add a protected environment deployment pattern (#54)

.github/workflows/CI-main.yml

@@ -86,10 +86,18 @@ jobs:
       version: ${{ needs.version.outputs.version }}
 
 
-  deploy:
-    if: false
+  staging-deploy:
     name: Deploy
     runs-on: ubuntu-latest
     needs: [release]
     steps:
-      - run: echo "Run deployment here"
+      - run: echo "Automatically deploy to staging"
+
+
+  # For traditional implementation of strict separation of duties for compliance
+  prod-deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+    needs: [staging-deploy]
+    steps:
+      - run: echo "Manual approval to deploy to production"