Bump GitHub Actions

[scottyhq]

Address #259

[scottyhq]

I think I've finally cracked the previews by separating "build" and "deploy" into separate workflows. Deploy uses workflow_run: , which is similar to pull_request_target in that it runs on the main branch such that forks can't modify it.

Made a small pull request to the surge-preview action to make this work afc163/surge-preview#297 (comment)

Tested here relativeorbit/sarbook#7

[scottyhq]

This only runs on the main branch, so need to merge to actually see it in action

[scottyhq]

Going to go ahead and merge, can always revert or disable the preview workflow in the future

[github-actions]

😭 Deploy PR Preview cf65eab failed. Build logs

_{🤖 By surge-preview}