Remove legacy ota1 publisher (#11554)

.github/workflows/bundle-deploy-eas-update.yml

@@ -225,31 +225,6 @@ jobs:
           SENTRY_DIST=${{ steps.env.outputs.bundle-identifier }}
           pnpm export
 
-      # Pin ONE bundle version for both publishes below. Each script used to call
-      # `date +%s` itself, so the same bytes reached denis and ota1 under versions
-      # seconds apart (observed: 1785102575 vs 1785102614). The version is part of
-      # the asset URL path, so each origin then served a manifest referencing a
-      # path only it had -- meaning a manifest fetched from one origin and assets
-      # fetched from the other 404. Both scripts fall back to `date +%s` when this
-      # is unset, so single-publisher callers are unaffected.
-      - name: 🔢 Pin bundle version
-        if: ${{ !steps.fingerprint.outputs.includes-changes &&
-          !steps.version.outputs.version-changed }}
-        run: echo "BUNDLE_VERSION=$(date +%s)" >> "$GITHUB_ENV"
-
-      # denis on EKS has been the sole origin for updates.bsky.app since
-      # 2026-07-26, so it publishes FIRST: it is the path that actually serves
-      # clients. The legacy ota1 upload runs after it, and exists only so that
-      # rolling the Bunny origin back to ota1 would find current bundles there.
-      #
-      # The ordering is load-bearing, not cosmetic. While the legacy step ran
-      # first, its failure skipped these steps and nothing reached EITHER origin
-      # -- the dual-write took down the working path with it. Both steps are
-      # still required to pass, so a stale ota1 remains a loud failure, but the
-      # publish that serves users has already landed before the legacy one can
-      # fail.
-      #
-      # Both halves are removed together when ota1 is decommissioned (Phase 5).
       - name: ☁️ Configure AWS credentials (denis)
         if: ${{ !steps.fingerprint.outputs.includes-changes &&
           !steps.version.outputs.version-changed }}
@@ -279,19 +254,6 @@ jobs:
           BSKY_IOS_BUILD_NUMBER: ${{ inputs.iosBuildNumber }}
           BSKY_ANDROID_VERSION_CODE: ${{ inputs.androidVersionCode }}
 
-      - name: 📦 Package Bundle and 🚀 Deploy (legacy ota1)
-        if: ${{ !steps.fingerprint.outputs.includes-changes &&
-          !steps.version.outputs.version-changed }}
-        run: pnpm use-build-number bash scripts/bundleUpdate.sh
-        env:
-          DENIS_API_KEY: ${{ secrets.DENIS_API_KEY }}
-          RUNTIME_VERSION: ${{ inputs.runtimeVersion }}
-          CHANNEL_NAME: ${{ inputs.channel || 'testflight' }}
-          # When set (required for production), these take precedence over the
-          # global EAS counters inside the use-build-number wrapper
-          BSKY_IOS_BUILD_NUMBER: ${{ inputs.iosBuildNumber }}
-          BSKY_ANDROID_VERSION_CODE: ${{ inputs.androidVersionCode }}
-
   buildIfNecessaryIOS:
     name: Build and Submit iOS
     needs: [bundleDeploy]