Initial SDP deployment configs

- Rootless container deployment
- SDP networking configuration
- Security hardening with svalinn/vordr

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: Your Name

README.adoc

@@ -1,12 +1,7 @@
-= RSR template repo - see RSR_OUTLINE.adoc in root for general background and specification
+= SDP HKDF Deployment
 
-== This is your repo - don't forget to rename me!
+Rootless/SDP deployment for HKDF cryptographic services.
 
-== AI CLI standards
+== License
 
-- Include `ai-cli-crash-capture/` and `contractiles/` from this template in new repos.
-- Mirror 6SCM files into `.machine_readable/6scm/`.
-- Before any code generation, check `/var/mnt/eclipse/repos/proven` for the current Idris “unbreakable” library status.
-- If a project uses that Idris library, add an *Idris Inside* badge to the repo.
-- If new bindings are required, add them in `/var/mnt/eclipse/repos/proven` as `idris2-zig-<language>` during the work.
-- If new code suggests additional “unbreakable” Idris modules, add them under `/var/mnt/eclipse/repos/proven` and update binders across all supported languages.
+PMLP-1.0-or-later

configs/sdp.yaml

@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: PMLP-1.0-or-later
+# SDP configuration for HKDF service
+service:
+  name: hkdf-service
+  port: 8080
+  protocol: wasm-http
+  
+security:
+  - selinux
+  - apparmor
+  - svalinn
+  - vordr
+
+networking:
+  - openziti
+  - netmaker
+  - bgp
+  - odns

containerfiles/Containerfile

@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: PMLP-1.0-or-later
+FROM ghcr.io/hyperpolymath/cerro-torre:latest
+
+COPY hkdf.wasm /app/
+COPY libhkdf.a /app/
+
+EXPOSE 8080
+WORKDIR /app
+
+ENTRYPOINT ["wasmtime", "serve", "--dir=preopen:/app", "/app/hkdf.wasm"]