chore: Backport deployment refactor (#17280)

This PR simply backports the deployment refactor work

Author: PhilWindle

.github/workflows/deploy-staging-network.yml

@@ -0,0 +1,121 @@
+# Deploy a single staging network
+# This workflow can be called directly or from other workflows
+name: Deploy Staging Network
+
+on:
+  workflow_call:
+    inputs:
+      network:
+        description: 'Network to deploy (e.g., staging-public, staging-ignition, testnet)'
+        required: true
+        type: string
+      semver:
+        description: 'Semver version (e.g., 2.3.4)'
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      network:
+        description: 'Network to deploy (e.g., staging-public, staging-ignition, testnet)'
+        required: true
+        type: choice
+        options:
+        - staging-public
+        - staging-ignition
+        - testnet
+      semver:
+        description: 'Semver version (e.g., 2.3.4)'
+        required: true
+        type: string
+
+concurrency:
+  group: deploy-staging-network-${{ inputs.network }}-${{ inputs.semver }}-${{ github.ref || github.ref_name }}
+  cancel-in-progress: true
+
+jobs:
+  deploy-network:
+    runs-on: ubuntu-latest
+    env:
+      GOOGLE_APPLICATION_CREDENTIALS: /tmp/gcp-key.json
+    steps:
+      - name: Determine checkout ref
+        id: checkout-ref
+        run: |
+          if [[ -n "${{ github.ref }}" ]]; then
+            echo "ref=${{ github.ref }}" >> $GITHUB_OUTPUT
+          elif [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            echo "ref=${{ github.ref_name }}" >> $GITHUB_OUTPUT
+          else
+            echo "ref=${{ github.ref }}" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        with:
+          ref: ${{ steps.checkout-ref.outputs.ref }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Validate inputs
+        run: |
+          # Validate network
+          if [[ ! -f "spartan/environments/${{ inputs.network }}.env" ]]; then
+            echo "Error: Environment file not found for network '${{ inputs.network }}'"
+            echo "Available networks:"
+            ls -1 spartan/environments/ | grep -v '\.local\.env$' || echo "No environment files found"
+            exit 1
+          fi
+
+          # Validate semver format
+          if ! echo "${{ inputs.semver }}" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+(-.*)?$'; then
+            echo "Error: Invalid semver format '${{ inputs.semver }}'. Expected format: X.Y.Z or X.Y.Z-suffix"
+            exit 1
+          fi
+
+          # Extract major version for v2 check
+          major_version="${{ inputs.semver }}"
+          major_version="${major_version%%.*}"
+          echo "MAJOR_VERSION=$major_version" >> $GITHUB_ENV
+
+      - name: Store the GCP key in a file
+        if: env.MAJOR_VERSION == '2'
+        env:
+          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
+        run: |
+          set +x
+          umask 077
+          printf '%s' "$GCP_SA_KEY" > "$GOOGLE_APPLICATION_CREDENTIALS"
+          jq -e . "$GOOGLE_APPLICATION_CREDENTIALS" >/dev/null
+
+      - name: Setup GCP authentication
+        if: env.MAJOR_VERSION == '2'
+        run: |
+          gcloud auth activate-service-account --key-file="$GOOGLE_APPLICATION_CREDENTIALS"
+
+      - name: Deploy network
+        if: env.MAJOR_VERSION == '2'
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ secrets.AZTEC_BOT_GITHUB_TOKEN }}
+          RUN_ID: ${{ github.run_id }}
+          SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+          GOOGLE_APPLICATION_CREDENTIALS: ${{ env.GOOGLE_APPLICATION_CREDENTIALS }}
+          REF_NAME: "v${{ inputs.semver }}"
+          GCP_PROJECT_ID: ${{ secrets.GCP_PROJECT_ID }}
+          AZTEC_DOCKER_IMAGE: "aztecprotocol/aztec:${{ inputs.semver }}"
+        run: |
+          echo "Deploying network: ${{ inputs.network }}"
+          echo "Using image: $AZTEC_DOCKER_IMAGE"
+          echo "Using branch/ref: ${{ steps.checkout-ref.outputs.ref }}"
+
+          cd spartan
+          ./bootstrap.sh network_deploy "${{ inputs.network }}"
+
+      - name: Update testnet monitoring (testnet only)
+        if: env.MAJOR_VERSION == '2' && inputs.network == 'testnet' && !contains(inputs.semver, '-')
+        env:
+          MONITORING_NAMESPACE: testnet-block-height-monitor
+        run: |
+          echo "Updating monitoring app for testnet deployment..."
+          ./spartan/metrics/testnet-monitor/scripts/update-monitoring.sh testnet ${{ env.MONITORING_NAMESPACE }}