add workflow to deploy custom dev stack

.github/workflows/deploy-custom-stack.yml

@@ -0,0 +1,70 @@
+name: Deploy Custom Dev Stack for Pull Request
+
+on:
+  pull_request:
+    branches:
+      - main  # Trigger when there's a PR targeting the main branch
+
+permissions:
+  id-token: write
+  contents: read
+
+env:
+  AWS_REGION: eu-west-2
+
+jobs:
+  setup:
+    runs-on: ubuntu-latest
+    outputs:
+      environments: "DEV"  # Directly set environments output to "DEV"
+    steps:
+      - id: set-output
+        run: |
+          echo "::set-output name=environments::DEV"  # Output only "DEV"
+
+  deploy-dev:
+    name: Deploy Custom DEV Stack for PR
+    runs-on: ubuntu-latest
+    needs: setup
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+
+      - name: Setup SAM CLI
+        uses: aws-actions/setup-sam@v2
+        with:
+          use-installer: true
+
+      - name: Assume temporary AWS role for DEV
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets[format('{0}_F2F_DDB_GH_ACTIONS_ROLE_ARN', needs.setup.outputs.environments) ] }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: SAM Validate
+        run: sam validate --region ${{ env.AWS_REGION }} -t template.yaml
+        working-directory: ./deploy
+
+      - name: SAM Build
+        run: sam build -t template.yaml
+        working-directory: ./deploy
+
+      - name: Deploy Custom Stack to DEV
+        env:
+          S3_BUCKET: ${{ secrets.DEV_CRI_F2F_ARTIFACT_SOURCE_BUCKET_NAME }}
+        run: |
+          sam deploy \
+            --resolve-s3 \
+            --stack-name "${GITHUB_HEAD_REF}" \
+            --s3-prefix "${GITHUB_HEAD_REF}" \
+            --confirm-changeset \
+            --config-env dev \
+            --parameter-overrides \
+              CodeSigningConfigArn="none" \
+              Environment="dev" \
+              PermissionsBoundary="none" \
+              SecretPrefix="none" \
+              VpcStackName="vpc-cri" \
+              L2DynamoStackName="f2f-cri-ddb" \
+              L2KMSStackName="f2f-cri-kms"
+        working-directory: ./deploy