Add operations workflow bundle

Author: moshehbenavraham

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/deploy.yml

@@ -0,0 +1,55 @@
+name: Deploy
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    name: Deploy placeholder and smoke test
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --dev --frozen
+
+      - name: TODO - wire deployment target
+        run: |
+          echo "TODO: connect a real deployment target for this repository."
+          echo "Running production-like validation locally until a target exists."
+
+      - name: Start production-like stack
+        run: docker compose --env-file .env.production.example -f docker-compose.prod.yml up -d --build
+
+      - name: Run smoke test
+        run: bash scripts/smoke-test.sh
+
+      - name: Collect logs on failure
+        if: failure()
+        run: docker compose --env-file .env.production.example -f docker-compose.prod.yml logs --no-color
+
+      - name: Tear down stack
+        if: always()
+        run: docker compose --env-file .env.production.example -f docker-compose.prod.yml down -v

.github/workflows/release.yml

@@ -0,0 +1,56 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  release:
+    name: Build release artifacts
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --dev --frozen
+
+      - name: Run release checks
+        run: uv run pytest tests/test_health.py tests/test_ops_api.py
+
+      - name: Build API image
+        run: docker build -f Dockerfile.api -t vidapi-api:${{ github.ref_name }} .
+
+      - name: Build worker image
+        run: docker build -f Dockerfile.worker -t vidapi-worker:${{ github.ref_name }} .
+
+      - name: TODO - wire deployment target
+        run: |
+          echo "TODO: connect a production deployment target for tagged releases."
+          echo "This workflow currently validates build artifacts only."
+
+      - name: Create GitHub release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true