Currently the ML repos approach assumes that:
- only the ML archive repo will be pushed to
- so only that repo has a deploy key and
- the deploy key is named based on the repo.
It would be better to allow the workflow to have a boolean on each repo whether or not it needs a key and if it does, specify the key name.