ci(identity): migrate identity-service CI to GitHub Actions

Adds .github/workflows/identity.yml covering install, lint, typecheck,
test, and docker push — mirroring the jobs previously defined under
.circleci/src/workflows/identity.yml. Disables the CircleCI workflow
trigger via path filtering (matches how web/mobile were migrated).

Tests now run against GHA service containers (postgres:11.1 + redis:7.0)
and ts-mocha is invoked directly with the same env vars run-tests.sh
exports, avoiding the audius-compose / docker-compose dependency.

Docker push (main only) uses docker/build-push-action with the git SHA
as the tag, matching what audius-compose push --prod identity-service
produced.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: dylanjeffers

.circleci/config.yml

@@ -211,10 +211,10 @@ workflows:
           config-path: ../workspace/.circleci/continue_config.yml
           mapping: |
             comms/.* run-discovery-workflow true
-            packages/identity-service/.* run-identity-workflow true
+            packages/identity-service/.* run-identity-workflow false
             eth-contracts/.* run-eth-contracts-workflow true
             .circleci/.* run-discovery-workflow true
-            .circleci/.* run-identity-workflow true
+            .circleci/.* run-identity-workflow false
             .circleci/.* run-eth-contracts-workflow true
             .circleci/.* run-protocol-dashboard-workflow true
             .circleci/.* run-sdk-workflow true
@@ -247,7 +247,7 @@ workflows:
             packages/fixed-decimal/.* run-mobile-workflow false
             packages/fixed-decimal/.* run-common-workflow true
             packages/spl/.* run-sdk-workflow true
-            packages/spl/.* run-identity-workflow true
+            packages/spl/.* run-identity-workflow false
           requires:
             - generate-config
             - init
@@ -262,10 +262,10 @@ workflows:
           config-path: ../workspace/.circleci/continue_config.yml
           mapping: |
             comms/.* run-discovery-workflow true
-            packages/identity-service/.* run-identity-workflow true
+            packages/identity-service/.* run-identity-workflow false
             eth-contracts/.* run-eth-contracts-workflow true
             .circleci/.* run-discovery-workflow true
-            .circleci/.* run-identity-workflow true
+            .circleci/.* run-identity-workflow false
             .circleci/.* run-eth-contracts-workflow true
             .circleci/.* run-protocol-dashboard-workflow true
             .circleci/.* run-sdk-workflow true
@@ -294,7 +294,7 @@ workflows:
             packages/fixed-decimal/.* run-mobile-workflow false
             packages/fixed-decimal/.* run-common-workflow true
             packages/spl/.* run-sdk-workflow true
-            packages/spl/.* run-identity-workflow true
+            packages/spl/.* run-identity-workflow false
             .* run-web-workflow false
             .* run-mobile-workflow false
           requires:

.circleci/src/workflows/identity.yml

@@ -1,3 +1,6 @@
+# NOTE: Identity Service CI/CD has been migrated to GitHub Actions
+# (.github/workflows/identity.yml). This workflow is disabled via path
+# filtering in config.yml (run-identity-workflow is forced to false).
 when: << pipeline.parameters.run-identity-workflow >>
 jobs:
   - identity-init: