#devops

Replace duplicated .env files with a layered Pydantic config framework: base, service, and instance mixins plus a CLI that unifies deploys across environments.

The GitHub Actions pipeline we ran end to end: secret scanning, Trivy, pytest, pre-release versioning, SonarCloud, and semantic release to production.