fix(jobs): use new docker image (#2945)

## Describe your changes

- Jobs Use new docker image 
Already deployed in staging, nb: requires manual change before
deployment on prod

.github/workflows/build-images.yaml

@@ -11,13 +11,6 @@ concurrency:
     cancel-in-progress: true
 
 jobs:
-    nango-jobs:
-        uses: ./.github/workflows/push-container.yaml
-        secrets: inherit
-        with:
-            package: jobs
-            run-cmd: ts-build
-            tags: -t nangohq/nango-jobs:${{ github.event.pull_request.head.sha || github.sha }} ${{ github.ref == 'refs/heads/master' && format('-t nangohq/nango-jobs:enterprise-{0} -t nangohq/nango-jobs:enterprise -t nangohq/nango-jobs:hosted-{1} -t nangohq/nango-jobs:hosted', github.event.pull_request.head.sha || github.sha, github.event.pull_request.head.sha || github.sha) || '' }}
     nango-runner:
         uses: ./.github/workflows/push-container.yaml
         secrets: inherit

.github/workflows/deploy.yaml

@@ -59,6 +59,11 @@ jobs:
             - name: Deploy jobs
               run: |
                   SERVICE_ID=${{ fromJson('{ production: "srv-clvvtdug1b2c73cklps0", staging: "srv-clthttda73kc73ejflg0" }')[inputs.stage] }}
+                  IMAGE_TAG_PREFIX=${{ fromJson('{ "production": "prod", "staging": "staging" }')[inputs.stage] }}
+                  IMAGE="docker.io/nangohq/nango:${IMAGE_TAG_PREFIX}-${{ github.sha }}"
+
+                  echo "Deploying $IMAGE to $SERVICE_ID"
+
                   curl --request POST "https://api.render.com/v1/services/$SERVICE_ID/deploys" --header "authorization: Bearer ${{ secrets.RENDER_API_KEY }}"
     deploy_runners:
         if: inputs.service == 'runner'

Dockerfile

@@ -90,12 +90,15 @@ RUN true \
   && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false
 
 # Do not use root to run the app
-USER node
+# BUT it does not work with secret mount (could not find a solution yet)
+# TODO: fix this
+# USER node
 
 WORKDIR /app/nango
 
 # Code
-COPY --from=build --chown=node:node /app/tmp /app/nango
+# COPY --from=build --chown=node:node /app/tmp /app/nango
+COPY --from=build /app/tmp /app/nango
 
 ARG image_env
 ARG git_hash