CI: Inline scripts into workflow

This makes it easier to skip steps for dependabot PRs, and possibly
makes better use of the UI.

.github/workflows/ci.yml

@@ -48,8 +48,11 @@ jobs:
           node-version-file: './.nvmrc'
           cache: 'yarn'
 
-      - name: Build project and generate Riff-Raff artefact
-        run: ./script/ci.sh
+      - name: Yarn
+        run: |
+          yarn clean
+          yarn install
+          yarn run build
 
       - name: Run unit tests
         run: yarn test --silent
@@ -58,8 +61,40 @@ jobs:
           TEST_DB_USER: postgres
           TEST_DB_PASSWORD: postgres
 
-      - name: Generate CFN templates from GuCDK
-        run: ./script/cfn.sh
+      - name: Copy files to Riff Raff package
+        if: >-
+          github.actor != 'dependabot[bot]'
+          && github.event.pull_request.user.login != 'dependabot[bot]'
+        run: cp package.json riff-raff.yaml target
+
+      - name: Yarn install in package
+        if: >-
+          github.actor != 'dependabot[bot]'
+          && github.event.pull_request.user.login != 'dependabot[bot]'
+        working-directory: ./target
+        run: yarn install --production
+
+      - name: Zip target directory contents (quietly)
+        if: >-
+          github.actor != 'dependabot[bot]'
+          && github.event.pull_request.user.login != 'dependabot[bot]'
+        run: zip -qr ../support-reminders.zip ./*
+        working-directory: ./target
+
+      - name: Yarn (CDK)
+        working-directory: cdk
+        run: |
+          yarn install
+          yarn tsc
+          yarn lint
+          yarn test
+
+      - name: Yarn synth (CDK)
+        if: >-
+          github.actor != 'dependabot[bot]'
+          && github.event.pull_request.user.login != 'dependabot[bot]'
+        working-directory: cdk
+        run: yarn synth
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v2