Use gh CLI to set GitHub secrets automatically

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: robtaylor

chat-backend/setup-gcp.sh

@@ -111,23 +111,21 @@ gcloud iam service-accounts add-iam-policy-binding "$DEPLOYER_SA" \
 # Get the workload identity provider resource name
 WIF_PROVIDER="projects/${PROJECT_NUMBER}/locations/global/workloadIdentityPools/${POOL_NAME}/providers/${PROVIDER_NAME}"
 
+# Set GitHub secrets
+echo ""
+echo "==> Setting GitHub secrets..."
+echo "$WIF_PROVIDER" | gh secret set GCP_WORKLOAD_IDENTITY_PROVIDER --repo="$GITHUB_REPO"
+echo "$DEPLOYER_SA" | gh secret set GCP_SERVICE_ACCOUNT --repo="$GITHUB_REPO"
+
 echo ""
 echo "=========================================="
 echo "Setup complete!"
 echo "=========================================="
 echo ""
-echo "Add these secrets to your GitHub repository:"
-echo ""
-echo "  GCP_WORKLOAD_IDENTITY_PROVIDER:"
-echo "    $WIF_PROVIDER"
-echo ""
-echo "  GCP_SERVICE_ACCOUNT:"
-echo "    $DEPLOYER_SA"
-echo ""
-echo "Go to: https://github.com/${GITHUB_REPO}/settings/secrets/actions"
-echo ""
-echo "=========================================="
+echo "GitHub secrets have been set:"
+echo "  - GCP_WORKLOAD_IDENTITY_PROVIDER"
+echo "  - GCP_SERVICE_ACCOUNT"
 echo ""
-echo "After adding secrets, trigger deployment by:"
+echo "Trigger deployment by:"
 echo "  - Pushing to main with changes in chat-backend/"
-echo "  - Or manually: gh workflow run deploy-chat-backend"
+echo "  - Or manually: gh workflow run deploy-chat-backend --repo $GITHUB_REPO"