🚀 Release: beta → master (#79)

* Refactor code structure for improved readability and maintainability

* feat(ci): add guard against forbidden docker exec curl usage and improve health checks

* fix(ci): enhance guard against forbidden docker exec curl usage in workflows

* fix(ci): refine guard against forbidden docker exec curl usage in workflows

* feat: enhance CI/CD workflow with production simulation and infra contract checks

- Added a new job `production-simulation` to validate the image under production-like conditions.
- Implemented infra contract naming guard to enforce canonical naming conventions for network and Redis URLs.
- Updated existing checks in the CI workflow to ensure no forbidden patterns are present in deploy paths.
- Enhanced `deploy.sh` script to track phase-aware deploy results for better rollback decisions.
- Modified readiness checks in `vps-readiness-check.sh` to ensure nginx and Redis are reachable before deployment.
- Updated documentation in `infra-contract.md` to reflect new naming conventions and requirements.

* fix: enforce canonical redis URL in env.example + scope guard to production paths only

Made-with: Cursor

* fix(ci): docker-exec curl guard ignores path-prefixed lines and self-doc

Made-with: Cursor

* fix(ci): remove api-ci-test container before docker rmi in bootstrap step

Made-with: Cursor

* fix(ci): infra leakage grep pipeline must not fail on zero matches (pipefail)

Made-with: Cursor

Author: rajashish147

.github/workflows/deploy.yml

@@ -241,8 +241,10 @@ jobs:
           # i.e., direct references to alertmanager, loki push clients, or
           # docker-compose.monitoring in the application source.
           # Exclude comment-only lines (-h suppresses filenames for grep -Ev).
+          # With bash -o pipefail (GHA default), grep exits 1 when there are zero matches;
+          # that must not fail the step — only non-empty LEAKS after filtering is an error.
           LEAKS=$(grep -rhE "(alertmanager|docker-compose\.monitoring)" src/ tests/ 2>/dev/null \
-                    | grep -Ev '^\s*(//|#|\*|/\*)')
+                    | grep -Ev '^\s*(//|#|\*|/\*)' || true)
           if [ -n "$LEAKS" ]; then
             echo "::error::Infra client references found in src/ or tests/"
             echo "$LEAKS"