Fix CI for external PRs

Secrets aren't available in PRs from forked repositories.
Google Maps keys aren't exactly private, but I don't really
want them committed on GitHub...

.github/scripts/setup-ci.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+WHERE=https://ember-google-maps.s3.eu-west-1.amazonaws.com/46830d7e7843d054dc6ab36416baf9dd942126f9.txt.gpg
+
+if [ -z $GOOGLE_MAPS_API_KEY ]
+then
+  KEY=$(curl -s $WHERE | gpg --quiet --yes --batch --decrypt --passphrase="a hamster in the rye")
+  echo "GOOGLE_MAPS_API_KEY=$KEY" >> $GITHUB_ENV
+fi

.github/workflows/ci.yml

@@ -37,6 +37,8 @@ jobs:
         with:
           path: '**/node_modules'
           key: ci-modules-${{ hashFiles('**/yarn.lock') }}
+      - name: Prepare
+        run: ./.github/scripts/setup-ci.sh
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
       - name: Lint
@@ -57,6 +59,8 @@ jobs:
         with:
           path: '**/node_modules'
           key: ci-modules-${{ hashFiles('**/yarn.lock') }}
+      - name: Prepare
+        run: ./.github/scripts/setup-ci.sh
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
       - name: Test
@@ -75,6 +79,8 @@ jobs:
         with:
           path: '**/node_modules'
           key: ci-modules-${{ hashFiles('**/yarn.lock') }}
+      - name: Prepare
+        run: ./.github/scripts/setup-ci.sh
       - name: Install dependencies
         run: yarn install --no-lockfile --non-interactive
       - name: Test
@@ -114,6 +120,8 @@ jobs:
         with:
           path: '**/node_modules'
           key: ci-modules-${{ hashFiles('**/yarn.lock') }}
+      - name: Prepare
+        run: ./.github/scripts/setup-ci.sh
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
       - name: Test

docs/.gitignore

@@ -10,6 +10,7 @@
 
 # misc
 /.env*
+/public/46830d7e7843d054dc6ab36416baf9dd942126f9.*
 /.pnp*
 /.sass-cache
 /.eslintcache