ops(sol): add public edge host preparation

.gitea/workflows/prepare-sol-public-edge.yaml

@@ -0,0 +1,43 @@
+name: prepare-sol-public-edge
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - sol/public-edge/**
+      - .gitea/workflows/prepare-sol-public-edge.yaml
+  workflow_dispatch:
+
+jobs:
+  prepare:
+    runs-on: k3s-deploy
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install OpenSSH client
+        run: |
+          if ! command -v ssh >/dev/null 2>&1; then
+            apt-get update
+            apt-get install -y --no-install-recommends openssh-client
+          fi
+
+      - name: Materialize sol SSH key
+        env:
+          SOL_SSH_PRIVATE_KEY_B64: ${{ secrets.SOL_SSH_PRIVATE_KEY_B64 }}
+        run: |
+          test -n "$SOL_SSH_PRIVATE_KEY_B64"
+          install -d -m 0700 "$HOME/.ssh"
+          printf '%s' "$SOL_SSH_PRIVATE_KEY_B64" | base64 -d >"$HOME/.ssh/sol_mevnode"
+          chmod 600 "$HOME/.ssh/sol_mevnode"
+
+      - name: Prepare public edge firewall rules
+        env:
+          TARGET_HOST: 149.50.96.162
+          TARGET_USER: user
+          PUBLIC_IFACE: enp6s0
+        run: |
+          chmod +x ./sol/public-edge/scripts/prepare-sol-public-edge.sh
+          export SSH_IDENTITY_FILE="$HOME/.ssh/sol_mevnode"
+          ./sol/public-edge/scripts/prepare-sol-public-edge.sh