update pipeline

Author: vonschtirlitz

.github/workflows/build-and-deploy.yml

@@ -10,10 +10,9 @@ on:
       - '.github/workflows/build-and-deploy.yml'
 
 env:
-  AWS_REGION: us-east-1
-  ECR_REPOSITORY: rimworld-hay-calc
-  # This can be set in repo → Settings → Environments → prod → vars
-  ECR_REGISTRY: ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com
+  AWS_REGION: ${{ vars.AWS_REGION }}
+  ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY }}
+  ECR_REGISTRY: ${{ vars.AWS_ACCOUNT_ID }}.dkr.ecr.${{ vars.AWS_REGION }}.amazonaws.com
 
 jobs:
   build:
@@ -30,7 +29,7 @@ jobs:
       - name: 🔐  Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
-          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GitHubOIDCDeploy
+          role-to-assume: ${{ secrets.OIDC_ROLE_ARN }}
           aws-region: ${{ env.AWS_REGION }}
 
       # ---------- ② Log in to ECR ----------