chore: add canary job and pin actions

.github/workflows/ci.yml

@@ -1,4 +1,4 @@
-# SPDX-FileCopyrightText: 2025 James Harton
+# SPDX-FileCopyrightText: 2026 James Harton
 #
 # SPDX-License-Identifier: Apache-2.0
 
@@ -12,41 +12,11 @@ on:
 
 permissions:
   contents: read
+  pages: write
+  id-token: write
 
 jobs:
-  build:
-    name: zola build
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-        with:
-          submodules: 'recursive'
-      - run: sudo snap install --edge zola
-      - run: zola build
-      - uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
-        with:
-          path: public/
-
-  reuse:
-    name: REUSE compliance
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - name: REUSE compliance check
-        uses: fsfe/reuse-action@v6
-
-  deploy:
-    name: Deploy site to GitHub Pages
-    runs-on: ubuntu-latest
-    needs: build
-    if: github.ref == 'refs/heads/main'
-    permissions:
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    steps:
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
+  CI:
+    uses: beam-bots/.github/.github/workflows/zola-ci.yml@ea14ecfba98c3efb2f8a85d75fabc4c9d7d38c1a # main
+    with:
+      enable-deploy: ${{ github.ref == 'refs/heads/main' }}