Specifically, see chakra/melange#133 (comment 6018) and chakra/melange#133 (comment 6060) for context.

Set three stages:

- build
- sign
- deploy

Name the jobs after the name of the binary(?) used or the relevant environment:

- makepkg
- gpg
- staging
- production

Furthermore:

- The protected environment [staging](https://code.chakralinux.org/chakra/packages/core/-/environments/24) exists, with the url https://rsync.chakralinux.org/packages/testing/x86_64/, to which both maintainers and developers are allowed to deploy.
- The protected environment [production](https://code.chakralinux.org/chakra/packages/core/-/environments/23) exists, with the url https://rsync.chakralinux.org/packages/core/x86_64/, to which both maintainers and developers are allowed to deploy.
- Only run the stages *build* and *sign*, and the *deploy* job *staging* in the context of a Merge Request
- Only run the *deploy* job *production* to the protected environment [production](https://code.chakralinux.org/chakra/packages/core/-/environments/23) if the branch is `master`