upload generated CFN to riff-raff

.github/workflows/ci.yml

@@ -18,7 +18,30 @@ jobs:
           cache: npm
           cache-dependency-path: 'pan-domain-node/package-lock.json'
 
-      - name: JS Build
+      - uses: actions/setup-node@v3
+        with:
+          node-version-file: '.nvmrc'
+          cache: npm
+          cache-dependency-path: 'cdk/package-lock.json'
+
+      - name: synth infra
+        working-directory: cdk
+        run: |
+          npm ci
+          npm test
+          npm run synth
+
+      - name: Upload infra definitions to Riff-Raff
+        uses: guardian/actions-riff-raff@v4
+        with:
+          app: pan-domain-authentication
+          projectName: 'pan-domain-authentication'
+          configPath: cdk/cdk.out/riff-raff.yaml
+          contentDirectories: |
+            cdk.out:
+              - cdk/cdk.out
+
+      - name: pan-domain-node JS Build
         run: |
           pushd pan-domain-node