🚀 Release: beta → master (#78)

* Refactor code structure for improved readability and maintainability

* feat(ci): add guard against forbidden docker exec curl usage and improve health checks

* fix(ci): enhance guard against forbidden docker exec curl usage in workflows

* fix(ci): refine guard against forbidden docker exec curl usage in workflows

* feat: enhance CI/CD workflow with production simulation and infra contract checks

- Added a new job `production-simulation` to validate the image under production-like conditions.
- Implemented infra contract naming guard to enforce canonical naming conventions for network and Redis URLs.
- Updated existing checks in the CI workflow to ensure no forbidden patterns are present in deploy paths.
- Enhanced `deploy.sh` script to track phase-aware deploy results for better rollback decisions.
- Modified readiness checks in `vps-readiness-check.sh` to ensure nginx and Redis are reachable before deployment.
- Updated documentation in `infra-contract.md` to reflect new naming conventions and requirements.

* fix: enforce canonical redis URL in env.example + scope guard to production paths only

Made-with: Cursor

* fix(ci): docker-exec curl guard ignores path-prefixed lines and self-doc

Made-with: Cursor

* fix(ci): remove api-ci-test container before docker rmi in bootstrap step

Made-with: Cursor

Author: rajashish147

.env.example

@@ -26,7 +26,9 @@ SUPABASE_SERVICE_ROLE_KEY=
 SUPABASE_JWT_SECRET=
 
 # --- Redis ---
-REDIS_URL=redis://localhost:6379
+# Production/Docker: Redis runs as 'redis' container on api_network (canonical contract).
+# Local development with Redis on the host: override REDIS_URL in your local .env (see docs/env-contract.md).
+REDIS_URL=redis://redis:6379
 
 # --- Security ---
 METRICS_SCRAPE_TOKEN=

.github/pull_request_template.md

@@ -52,7 +52,7 @@ Closes #
 ## Final Checklist
 
 - [ ] PR title follows conventional commit format (`type(scope): description`)
-- [ ] Branch name follows convention (`feat/*`, `fix/*`, `infra/*`, etc.)
+- [ ] Branch name follows convention (`feat/*`, `fix/*`, `docs/*`, etc.)
 - [ ] No debug logs, commented-out code, or `TODO` / `FIXME` left in diff
 - [ ] No secrets or credentials committed
 - [ ] Relevant documentation updated (if applicable)