CI: update deploy workflow

- Add concurrency to cancel in-progress jobs
- Add checkout step to deploy job
- Run workflow on all pushes, but only deploy on main

Author: ksobrenat32

.github/workflows/deploy.yml

@@ -1,13 +1,19 @@
-name: Deploy docs
+name: Build and Deploy docs
 
 on:
   push:
-    branches:
-      - main
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
     name: Build
     runs-on: ubuntu-latest
     defaults:
@@ -36,12 +42,19 @@ jobs:
           path: ./build
 
   deploy:
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
     name: Deploy
     needs: build
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
 
     steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
       - name: Download artifact
         uses: actions/download-artifact@v4
         with:
@@ -52,4 +65,5 @@ jobs:
         uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./build
+          publish_dir: ./build
+