feat: sandbox deploy (#805)

Signed-off-by: hxtree <[email protected]>

.github/workflows/call-deploy.yml

@@ -1,5 +1,5 @@
-# libray and platform dependencies MUST be published to npm
-# prior to services being deployed to S3 dependencies to ensure dependencies are avaliable
+# all library and platform dependencies MUST be published to npm BEFORE deploying
+# services to S3 to ensure that dependencies are available.
 
 name: Deploy Artifacts
 

.github/workflows/on-labeled.yml

@@ -0,0 +1,18 @@
+name: Labeled
+
+on:
+  pull_request:
+    types:
+      - labeled
+
+jobs:
+  Deploy:
+    if: |
+      github.event.label.name == 'sandbox'
+    uses: ./.github/workflows/call-deploy.yml
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      AWS_ACCESS_KEY: ${{ secrets.AWS_ACCESS_KEY }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_BUCKET: ${{ secrets.AWS_BUCKET }}
+      AWS_REGION: ${{ secrets.AWS_REGION }}