CI/CD Pipeline (GitHub Actions)
End-to-end deployment automation: on every PR lint, type check, unit tests, integration tests (Testcontainers), security scan (Trivy, Snyk), build Docker image. On merge to main deploy to staging, smoke tests, manual approval for production, rolling deployment with CloudWatch alarm-based automatic rollback.

