ci(core): add nightly builds with PRODUCTION=1

ci/build.yml

@@ -44,6 +44,28 @@ core fw regular debug build:
       - trezor-fw-regular-debug-*.*.*-$CI_COMMIT_SHORT_SHA.bin
     expire_in: 1 week
 
+core fw regular production build:
+  stage: build
+  <<: *gitlab_caching
+  needs: []
+  only:
+    - schedules  # nightly build
+  variables:
+    PRODUCTION: "1"
+  script:
+    - nix-shell --run "poetry run make -C core build_boardloader"
+    - nix-shell --run "poetry run make -C core build_bootloader"
+    - nix-shell --run "poetry run make -C core build_bootloader_ci"
+    - nix-shell --run "poetry run make -C core build_prodtest"
+    - nix-shell --run "poetry run make -C core build_firmware"
+    - nix-shell --run "poetry run make -C core sizecheck"
+    - cp core/build/firmware/firmware.bin trezor-fw-regular-production-$CORE_VERSION-$CI_COMMIT_SHORT_SHA.bin
+  artifacts:
+    name: "$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
+    paths:
+      - trezor-fw-regular-production-*.*.*-$CI_COMMIT_SHORT_SHA.bin
+    expire_in: 1 week
+
 core fw btconly build:
   stage: build
   <<: *gitlab_caching
@@ -84,6 +106,25 @@ core fw btconly debug build:
       - trezor-fw-btconly-*.*.*-$CI_COMMIT_SHORT_SHA.bin
     expire_in: 1 week
 
+core fw btconly production build:
+  stage: build
+  <<: *gitlab_caching
+  needs: []
+  only:
+    - schedules  # nightly build
+  variables:
+    PRODUCTION: "1"
+    BITCOIN_ONLY: "1"
+  script:
+    - nix-shell --run "poetry run make -C core build_firmware"
+    - nix-shell --run "poetry run ./tools/check-bitcoin-only core/build/firmware/firmware.bin"
+    - cp core/build/firmware/firmware.bin trezor-fw-btconly-production-$CORE_VERSION-$CI_COMMIT_SHORT_SHA.bin
+  artifacts:
+    name: "$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
+    paths:
+      - trezor-fw-btconly-production-*.*.*-$CI_COMMIT_SHORT_SHA.bin
+    expire_in: 1 week
+
 core fw btconly t1 build:
   stage: build
   <<: *gitlab_caching