Add Phishing Detection Embedded Data Update Workflow

[not-a-rootkit]

Task/Issue URL: https://app.asana.com/0/72649045549333/1208270234071172/f
Tech Design URL: https://app.asana.com/0/481882893211075/1207483114414814
CC:

Description:
In ✓ Tech Design: Phishing Protection Data Updates we defined an approach to get embedded data for phishing protection into the app builds. This pattern was implemented, but two small components still need merging:

• The update script:
  • A small bash script that pulls data from the API into the repo in JSON format, and updates the checksums + revision values in PhishingDetection.swift .
  • This has already been implemented, it just needs testing and merging:
    • Add Phishing Detection Data Update Script #3243
• A GitHub Action workflow that executes this script once a week and creates a PR that merges this data into the new release build.
  • Example Script
  • The secrets and workflow have already been defined, it just needs to be tested, reviewed, and merged.

Note
After testing, but before merging, I'd like to update the GH action to run on a schedule once per week using cron:

on:
  schedule:
    - cron: '0 0 * * 0'  # Midnight UTC every Sunday

This way it can be reviewed just once per week by whoever is on maintenance that week as part of the weekly maintenance rota.

Steps to test this PR:

1. Test the script locally: bash scripts/update_phishing_data.sh
2. Ensure the script runs, check changes in git:
3. DuckDuckGo/PhishingDetection/PhishingDetection.swift - sha256 and version values updated correctly
4. DuckDuckGo/PhishingDetection/filterSet.json - not empty
5. DuckDuckGo/PhishingDetection/hashPrefixes.json - not empty
6. Check the GH action has executed and created a PR with name like Update phishing protection datasets to 1681795:
7. Update phishing protection datasets to 1681795 #3404

Definition of Done:

• Does this PR satisfy our Definition of Done?

---

Internal references:

Pull Request Review Checklist
Software Engineering Expectations
Technical Design Template
Pull Request Documentation

[github-actions]

	Warnings
⚠️	PR has more than 500 lines of code changing. Consider splitting into smaller PRs if possible.

Generated by 🚫 dangerJS against d6d4fed