- Add production.yml with environment name/URL and protection rules configuration
- Add required_reviewers (cto/head-of-operations/security-lead) and prevent_force_pushes setting
- Add required_status_checks with strict mode for build-and-push/test-suite/security-scan/performance-tests contexts
- Add deployment_restrictions limiting deployments to specific users (cto/head-of-operations/devops-lead) and platform
- Add deploy workflow triggered on push to main, version tags, and manual workflow_dispatch with environment selection
- Add build-and-push job with GHCR login, Docker metadata extraction for API server/web dashboard, image builds with branch/tag/sha tagging, and image outputs
- Add deploy-staging job (main branch or manual staging selection) with kubectl setup and placeholder deployment commands
- Add CI workflow triggered on push/PR to main/develop branches
- Add api-server-test job with PostgreSQL service, Go 1.23 setup, golangci-lint, race detection tests with coverage, and binary build
- Add web-dashboard-test job with Node.js 20 setup, npm ci, linting, TypeScript type checking, and build
- Add docker-build job (main branch only) with Buildx setup, API server/web dashboard image builds, and GitHub Actions
nutcas3