Lucas Berger 27046dbf92 ci(16-06): add static image-hygiene assertion + boot-smoke before push ...

- Static assertions step: verifies .dockerignore exists, covers all forbidden
  patterns (.env, node_modules, apps/api/scripts, .git, .planning, apps/api/tests,
  apps/pwa/e2e), and --target production is still pinned in publish.yml (T-16-19)
- Boot-smoke step: runs freshly-built sha_tag image with NODE_ENV=production +
  DEV_AUTH_BYPASS=true; fails if image starts (EXIT==0) or times out (EXIT==124),
  passes on any other non-zero exit — proves D-08 guard fires in shipped image (T-16-18)
- Both steps ordered after build and before push; a hygiene failure blocks publish (T-16-20)

2026-06-13 08:27:13 -04:00

..

workflows

ci(16-06): add static image-hygiene assertion + boot-smoke before push

2026-06-13 08:27:13 -04:00