Create a guide for using build/publish in CI

[zmitchell]

[zmitchell]

@stahnma to fill in the detail for what needs to be documented (fill out the issue description)

[stahnma]

We have the CI pages already with using Flox in CI. https://flox.dev/docs/tutorials/ci-cd/

The things we need are primarily

"I would like to publish via CI" which implies needing credentials to publish to a catalog. I don't know how we do that. /cc @nicklewis @brendaneamon

All other steps, such as "install a custom package during ci" would probably be covered via consumer documentation.

[stahnma]

From @nicklewis :
we will give them a secret and they can make basically a curl request with that secret to get a token

The command the user invokes will be akin to:

            curl --request POST \
              --url $FLOX_AUTH0_URL/oauth/token \
              --header 'content-type: application/x-www-form-urlencoded' \
              --data "client_id=${{ secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_ID }}" \
              --data "audience=https://hub.flox.dev/api" \
              --data "grant_type=client_credentials" \
              --data "client_secret=${{ secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_SECRET }}" 

[zmitchell]

So these variables/secrets are things that a user will be provided?

• $FLOX_AUTH0_URL
• secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_ID
• secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_SECRET

[nicklewis]

The url will be https://auth.flox.dev. We will provide them an org-specific client id and client secret.