Add GitHub Actions workflows for dependency updates and releases

[jermnelson]

Summary

• Adds update-dependencies.yml — manually triggered workflow that creates the update-dependencies branch, bumps the version, runs poetry update, runs the test suite, and opens a PR with auto-merge enabled
• Adds publish-release.yml — manually triggered workflow (run after the dep-update PR merges) that cleans S3 logs for dev and stage, publishes a GitHub release, builds and pushes the Docker image, deploys to dev and stage, and optionally opens a Terraform PR

Required setup before use

Repository settings:

• Enable Allow auto-merge (Settings → General) for the auto-merge step in update-dependencies.yml
• Create development and stage environments if you want manual approval gates on deploys

Secrets (Settings → Secrets → Actions):

• AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY
• DOCKER_USER / DOCKER_PASS (same credentials used in CircleCI ld4p context)

Variables (Settings → Variables → Actions):

• AWS_REGION — e.g. us-west-2
• S3_DEV_BUCKET / S3_STAGE_BUCKET — Sinopia API S3 bucket names
• TERRAFORM_REPO — e.g. LD4P/terraform-sinopia (optional; Terraform job is skipped if unset)

Test plan

• Verify update-dependencies.yml appears in Actions tab
• Run update-dependencies.yml with patch input on a test branch
• Confirm PR is created and auto-merge is enabled
• Add S3 bucket variable names and run publish-release.yml against a test version
• Add deploy commands for dev and stage environments

🤖 Generated with Claude Code