Enable CI System (manifests, ...)

[abenokraitis]

[cloin]

Instead of base64 manifest.zip (#1424), you can try adding an encrypted manifest to the repo with the decryption password set as a secret and decode on the fly.

encrypt:
gpg --symmetric --cipher-algo AES256 manifest.zip

decrypt:
gpg --quiet --batch --yes --decrypt --passphrase="${{ secrets.GPG_PASSPHRASE }}" \
--output $HOME/secrets/manifest.zip manifest.zip.gpg