fix(ci): don't try to provision an AWS account if we lack permissions (…

…#61)

.github/workflows/ci.yml

@@ -66,6 +66,7 @@ jobs:
 
   build:
     runs-on: ubuntu-latest
+    needs: permission_check
     outputs:
       image_name: ${{ steps.set_output_image_name.outputs.image_name }}
 
@@ -127,6 +128,7 @@ jobs:
         cache-to: type=gha,mode=max
 
     - name: Provision DCE
+      if: needs.permission_check.outputs.can-write == 'true'
       uses: observeinc/[email protected]
       with:
         aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}