feat: Adding syncing of NNS released wasm versions

.github/repo_policies/BOT_APPROVED_FILES

@@ -8,3 +8,4 @@ ic-os/hostos/context/docker-base.prod
 ic-os/setupos/context/docker-base.dev
 ic-os/setupos/context/docker-base.prod
 testnet/mainnet_revisions.json
+mainnet-canisters.json

.github/workflows/update-mainnet-revisions.yaml

@@ -5,6 +5,10 @@ on:
     - cron: "10 * * * *"
   workflow_dispatch:
 
+defaults:
+  run:
+    shell: bash
+
 jobs:
   update-ic-versions-file:
     runs-on: ubuntu-latest
@@ -28,5 +32,41 @@ jobs:
         run: |
           set -eEuxo pipefail
 
-          time python ci/src/mainnet_revisions/mainnet_revisions.py
-        shell: bash
+          time python ci/src/revisions/mainnet_revisions.py subnets
+
+  update-nervous-system-wasms:
+    runs-on:
+      labels: dind-small
+    container:
+      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      options: >-
+        -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
+    steps:
+      - name: Create GitHub App Token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
+          private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup gh cli
+        uses: ksivamuthu/actions-setup-gh-cli@v3
+        with:
+          version: 2.53.0
+
+      - name: Update Mainnet canisters file
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          set -eEuxo pipefail
+
+          # Leftover from previous step of setting up gh cli
+          rm gh_tar
+
+          time python ci/src/revisions/mainnet_revisions.py canisters