fix: deploy workflow auto-triggers on dev/test/main push

- Branch mapping: dev→devnet, test→testnet, main→mainnet
- Auto-deploy on k8s/ changes (was workflow_dispatch only)
- Apply CRDs before kustomization
- Single DOKS cluster (do-sfo3-zoo-k8s)
- Correct overlay names (zoo-devnet/zoo-testnet/zoo-mainnet)

.github/workflows/deploy.yml

@@ -1,6 +1,11 @@
-name: Deploy Zoo (L2 on Hanzo)
+name: Deploy Zoo Network
 
 on:
+  push:
+    branches: [dev, test, main]
+    paths:
+      - 'k8s/**'
+      - 'deploy.sh'
   workflow_dispatch:
     inputs:
       environment:
@@ -8,78 +13,55 @@ on:
         required: true
         type: choice
         options:
-          - prod
-          - dev
-          - test
-      service:
-        description: 'Service to deploy'
-        required: true
-        type: choice
-        options:
-          - all
-          - zoo-ngo
-          - zoo-exchange
-          - zoo-network
-          - zoo-vote
-          - zoo-fund
-          - zoo-foundation
-          - zoo-voyage
-      version:
-        description: 'Image tag (default: latest)'
-        required: false
-        type: string
+          - devnet
+          - testnet
+          - mainnet
 
 permissions:
   id-token: write
   contents: read
 
 env:
-  # Zoo runs as namespace in Hanzo clusters
-  HANZO_PROD_CLUSTER_ID: 1a153000-90a6-48ad-9375-7ef901a9bf7f
-  HANZO_DEV_CLUSTER_ID: baedf25e-a6ec-4886-aa4b-ec3b02a0511d
-  HANZO_TEST_CLUSTER_ID: ec72c26c-926f-40ee-bb8d-1efc646e4feb
+  CLUSTER: do-sfo3-zoo-k8s
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
-    environment: ${{ inputs.environment }}
+    environment: ${{ inputs.environment || (github.ref_name == 'main' && 'mainnet') || (github.ref_name == 'test' && 'testnet') || 'devnet' }}
     steps:
       - uses: actions/checkout@v4
 
+      - name: Resolve environment
+        id: env
+        run: |
+          if [ -n "${{ inputs.environment }}" ]; then
+            ENV="${{ inputs.environment }}"
+          elif [ "${{ github.ref_name }}" = "main" ]; then
+            ENV="mainnet"
+          elif [ "${{ github.ref_name }}" = "test" ]; then
+            ENV="testnet"
+          else
+            ENV="devnet"
+          fi
+          echo "env=$ENV" >> "$GITHUB_OUTPUT"
+          echo "overlay=zoo-$ENV" >> "$GITHUB_OUTPUT"
+
       - name: Install doctl
         uses: digitalocean/action-doctl@v2
         with:
           token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
 
       - name: Configure kubectl
-        run: |
-          case "${{ inputs.environment }}" in
-            prod) CLUSTER_ID="${{ env.HANZO_PROD_CLUSTER_ID }}" ;;
-            dev)  CLUSTER_ID="${{ env.HANZO_DEV_CLUSTER_ID }}" ;;
-            test) CLUSTER_ID="${{ env.HANZO_TEST_CLUSTER_ID }}" ;;
-          esac
-          doctl kubernetes cluster kubeconfig save "$CLUSTER_ID"
+        run: doctl kubernetes cluster kubeconfig save "${{ env.CLUSTER }}"
 
-      - name: Ensure zoo namespace
-        run: kubectl create ns zoo --dry-run=client -o yaml | kubectl apply -f -
+      - name: Apply CRDs
+        run: kubectl apply -f k8s/crds/
 
       - name: Apply kustomization
-        run: |
-          kubectl apply -k k8s/zoo-${{ inputs.environment }}
-
-      - name: Deploy services
-        run: |
-          NAMESPACE="zoo"
-          VERSION="${{ inputs.version || 'latest' }}"
-          SERVICE="${{ inputs.service }}"
-
-          if [ "$SERVICE" = "all" ]; then
-            kubectl rollout restart deployment --all -n "$NAMESPACE" 2>/dev/null || true
-          else
-            kubectl set image "deployment/$SERVICE" "$SERVICE=ghcr.io/zoo-labs/$SERVICE:$VERSION" -n "$NAMESPACE" 2>/dev/null || \
-              echo "Deployment $SERVICE not found"
-          fi
+        run: kubectl apply -k k8s/${{ steps.env.outputs.overlay }}
 
       - name: Monitor rollout
         run: |
-          kubectl rollout status deployment --all -n zoo --timeout=300s 2>/dev/null || true
+          NS="${{ steps.env.outputs.overlay }}"
+          kubectl rollout status deployment --all -n "$NS" --timeout=300s 2>/dev/null || true
+          kubectl get pods -n "$NS" -o wide