feat(trogon-sink-github): GitHub webhook receiver → NATS JetStream

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Author: yordis

devops/docker/compose/compose.yml

@@ -4,11 +4,49 @@ services:
   nats:
     image: nats:latest
     container_name: nats
-    command: 
+    command:
       - "--jetstream"
       - "--store_dir=/data"
+      - "--http_port=8222"
+    ports:
+      - "4222:4222"
+      - "8222:8222"
     volumes:
       - nats_data:/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:8222/healthz"]
+      interval: 5s
+      timeout: 3s
+      start_period: 5s
+      retries: 3
+
+  trogon-sink-github:
+    build:
+      context: ../../../rsworkspace
+      dockerfile: crates/trogon-sink-github/Dockerfile
+    ports:
+      - "${GITHUB_WEBHOOK_PORT:-8080}:${GITHUB_WEBHOOK_PORT:-8080}"
+    environment:
+      NATS_URL: "nats:4222"
+      GITHUB_WEBHOOK_SECRET: "${GITHUB_WEBHOOK_SECRET}"
+      GITHUB_WEBHOOK_PORT: "${GITHUB_WEBHOOK_PORT:-8080}"
+      GITHUB_SUBJECT_PREFIX: "${GITHUB_SUBJECT_PREFIX:-github}"
+      GITHUB_STREAM_NAME: "${GITHUB_STREAM_NAME:-GITHUB}"
+      GITHUB_STREAM_MAX_AGE_SECS: "${GITHUB_STREAM_MAX_AGE_SECS:-604800}"
+      GITHUB_NATS_ACK_TIMEOUT_SECS: "${GITHUB_NATS_ACK_TIMEOUT_SECS:-10}"
+      GITHUB_MAX_BODY_SIZE: "${GITHUB_MAX_BODY_SIZE:-26214400}"
+      RUST_LOG: "${RUST_LOG:-info}"
+    depends_on:
+      nats:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:${GITHUB_WEBHOOK_PORT:-8080}/health"]
+      interval: 10s
+      timeout: 3s
+      start_period: 10s
+      retries: 3
 
 volumes:
   nats_data:

rsworkspace/.dockerignore

@@ -0,0 +1,27 @@
+# Rust build artifacts — largest offender, can be many GBs
+target/
+
+# Dev tooling
+.git/
+.github/
+.cargo/
+
+# Test/CI artifacts
+lcov.info
+coverage.xml
+*.profraw
+*.profdata
+mutants.out*/
+
+# IDE / OS
+.idea/
+.vscode/
+.DS_Store
+Thumbs.db
+*.swp
+*.swo
+
+# Environment files with secrets
+.env
+.env.*
+!.env.example