
Deploy What Changed: Nx affected + Cloud Run + Workload Identity Federation
A merge to main should ship the services that merge touched, and nothing else. The whole pipeline — keyless GitHub-to-Google auth, one deploy target per app, and the dependency-graph work that makes "affected" trustworthy.



































