feat: parameterise etl ref (#513)

* fix: drop unsupported param validation on workflow_call

* fix: add workflow perms

* fix: checkout etl before doing docker build to simplify dockerfile and avoid token errors

* feat: add olcs-ref param to allow running etl branches

.github/workflows/run-liquibase.yaml

@@ -22,7 +22,12 @@ on:
         type: boolean
         default: true
       ref:
-        description: "Git ref to checkout (branch, tag, or commit SHA)"
+        description: "Git ref to checkout for vol-app (for liquibase dockerfile/entrypoint)"
+        required: false
+        type: string
+        default: "main"
+      etl_ref:
+        description: "Git ref to checkout for ETL repo (to bundle in as liquibase changelog)"
         required: false
         type: string
         default: "main"
@@ -46,6 +51,12 @@ on:
         type: string
         required: false
         default: "main"
+        description: "Git ref to checkout for vol-app (for liquibase dockerfile/entrypoint)"
+      etl_ref:
+        description: "Git ref to checkout for ETL repo (to bundle in as liquibase changelog)"
+        type: string
+        required: false
+        default: "main"
 env:
   REGISTRY: 054614622558.dkr.ecr.eu-west-1.amazonaws.com
   AWS_REGION: ${{ vars.DVSA_AWS_REGION }}
@@ -63,7 +74,8 @@ jobs:
         with:
           repository: dvsa/olcs-etl
           path: infra/docker/liquibase/changelog
-          token: ${{ secrets.GITHUB_TOKEN }}
+          ref: ${{ inputs.etl_ref || 'main' }}
+
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3