CI: update deploy workflow

- Add concurrency to cancel in-progress jobs
- Add checkout step to deploy job
- Run workflow on all pushes, but only deploy on main

Author: ksobrenat32

.github/workflows/deploy.yml

@@ -1,19 +1,19 @@
-name: Deploy docs
+name: Build and Deploy docs
 
 on:
   push:
-    branches:
-      - main
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: ./
-
+    permissions:
+      contents: read
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4
@@ -40,6 +40,8 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
+    permissions:
+      contents: write
 
     steps:
       - name: Download artifact
@@ -52,4 +54,5 @@ jobs:
         uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./build
+          publish_dir: ./build
+