Make remote cache private until the costs are figured out

For the past 4 days, there have been 600+ GB downloads from the public
cache, so I am making it private for now and only accessible from CI.

Author: p0deje

.bazelrc

@@ -38,12 +38,6 @@ build:linux --workspace_status_command=scripts/build-info.sh
 build:macos --workspace_status_command=scripts/build-info.sh
 build:windows --workspace_status_command="powershell.exe scripts/build-info.ps1"
 
-# Enable read-only public remote cache.
-# To enable write mode, add the following to your .bazelrc.local:
-#   build --remote_upload_local_results=true --google_credentials=<path-to-json-key>
-
-build --remote_cache=https://storage.googleapis.com/seleniumhq-bazel-remote-cache --remote_upload_local_results=false
-
 # Make sure we get something helpful when tests fail
 
 build --verbose_failures

.github/actions/cache-bazel/action.yml

@@ -49,11 +49,11 @@ runs:
           ${{ runner.os }}-bazel-${{ inputs.workflow }}-
     - run: |
         echo '${{ inputs.gcs-key }}' >> gcs.json
-        echo "build --remote_upload_local_results=true --google_credentials=gcs.json" >> .bazelrc
-      if: github.ref == 'refs/heads/trunk' && runner.os != 'Windows'
+        echo "build --remote_cache=https://storage.googleapis.com/seleniumhq-bazel-remote-cache --remote_upload_local_results=${{ github.ref == 'refs/heads/trunk' }} --google_credentials=gcs.json" >> .bazelrc
+      if: runner.os != 'Windows'
       shell: bash
     - run: |
         echo ${{ inputs.gcs-key }}>>gcs.json
-        echo "build --remote_upload_local_results=true --google_credentials=gcs.json">>.bazelrc
+        echo "build --remote_cache=https://storage.googleapis.com/seleniumhq-bazel-remote-cache --remote_upload_local_results=${{ github.ref == 'refs/heads/trunk' }} --google_credentials=gcs.json">>.bazelrc
       if: github.ref == 'refs/heads/trunk' && runner.os == 'Windows'
       shell: cmd