As a contributor to the security tracker, I want to be able to merge PRs without affecting the production deployment.
Acceptance criteria
Given I have some change in a pull request,
When it is merged,
Then the latest state of the main branch appears in the staging deployment.
Given I have a set of changes in the main branch ready for production deployment,
When I merge it into the deployment branch,
Then that new state appears in production.