🚀 Release: beta → master

[rajashish147]

🚀 Automated Release PR

This PR contains all changes from beta to master.

---

📦 Latest Changes

• refactor: canonical INFRA_ROOT=/opt/infra for nginx paths and compose files
• fix(deploy): sudo mkdir+chown for INFRA nginx live/backup; readiness check 7b
• fix(deploy): writable state dir for lock/slot; chown /var/lib/fieldtrack or fallback; CI reads both paths
• fix(vps): port 80/443 readiness use ss and allow docker-proxy (not lsof truncation)
• fix(ci): path-aware grep filters for -r output; harden .env API_BASE_URL on SSH
• fix(ci): infra leakage grep pipeline must not fail on zero matches (pipefail)
• fix(ci): remove api-ci-test container before docker rmi in bootstrap step
• fix(ci): docker-exec curl guard ignores path-prefixed lines and self-doc
• fix: enforce canonical redis URL in env.example + scope guard to production paths only
• feat: enhance CI/CD workflow with production simulation and infra contract checks
• fix(ci): refine guard against forbidden docker exec curl usage in workflows
• fix(ci): enhance guard against forbidden docker exec curl usage in workflows
• feat(ci): add guard against forbidden docker exec curl usage and improve health checks
• Refactor code structure for improved readability and maintainability

---

🧠 Notes

• Auto-managed PR
• Do not edit manually