ci: build and deploy container images

[peterlipt]

Summary

• build and validate the application image in GitHub Actions
• publish immutable images to GHCR instead of building on the VPS
• deploy staging automatically after merge to staging
• keep production as a protected manual release from main
• add health checks, database backup before production migrations, and application rollback
• document environment secrets, variables, first deployment, and rollback

Validation

• git diff --check
• workflow lint with actionlint
• Bash syntax validation for the deployment script
• Docker Compose configuration validation for production and staging
• ESLint (0 errors; 2 existing warnings)
• TypeScript checks
• Next.js production build

Deployment note

Opening this PR only runs CI. Merging it into staging triggers the first GHCR build and staging deployment.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
frt	Ready	Preview	Aug 3, 2026 8:30pm