ci: remove duplicate actions, use finch-core (#511)

finch-core already defines scripts for updating some dependencies:

https://github.com/runfinch/finch-core/blob/main/bin/update-deps.sh


Since this repo takes finch-core as a submodule, some actions can be
consolidated to this one for dependency updates.

CORE_URL is unused and that behavior is removed.

Issue #, if available:

*Description of changes:*

*Testing done:*



- [x] I've reviewed the guidance in CONTRIBUTING.md


#### License Acceptance

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.

Signed-off-by: Gavin Inglis <[email protected]>

.github/workflows/sync-submodules.yaml → .github/workflows/sync-submodules-and-deps.yaml

@@ -1,4 +1,4 @@
-name: Sync Submodules
+name: Sync Submodules and Dependencies
 
 # Pulls changes from the main branch of submodules daily at 9:00 UTC and opens a PR.
 on:
@@ -15,14 +15,26 @@ jobs:
  with:
  submodules: recursive
  token: ${{ secrets.GITHUB_TOKEN }}
- - name: Update sub modules
+
+ - name: Update submodules
  run: |
  git submodule update --remote
+
+ - name: Update OS image
+ run: |
  ./.github/bin/update-os-image.sh
 
+ - name: Update lima dependencies url
+ run: |
+ ./deps/finch-core/bin/update-deps.sh -d ${{ secrets.DEPENDENCY_BUCKET_NAME }}
+
+ - name: Update rootfs
+ run: |
+ ./deps/finch-core/bin/update-rootfs.sh -d ${{ secrets.DEPENDENCY_BUCKET_NAME }}
+
  - name: Create PR
  uses: peter-evans/create-pull-request@v5
  with:
  token: ${{ secrets.GITHUB_TOKEN }}
  signoff: true
- title: 'build(deps): Bump submodules'
+ title: 'build(deps): Bump submodules and dependencies'