would be good to have a dry run deploy workflow that runs on PRs as the normal deploy only runs on pushes to master - and so PRs that break it can break master