feat(infra): infrastructure automation scripts and workflows (#471, #472, #473, #474)

[authenticeasy-sys]

Summary

Implements all four infrastructure automation issues in a single PR.

---

Issue #471 — Automated documentation generation

• infrastructure/scripts/generate-docs.sh — generates Terraform docs, K8s resource inventory, and dependency graph into infrastructure/docs/auto-generated/
• infrastructure/scripts/generate-diagrams.py — generates Mermaid network and Terraform dependency diagrams
• infrastructure/docs/auto-generated/ — output directory (tracked with .gitkeep)
• infrastructure/ci/docs-generation.yml — updated CI workflow with new generate-infra-docs job (triggers on push to main when infra files change, installs terraform-docs, runs both scripts, commits results)

Issue #472 — Chaos engineering test suite

• infrastructure/scripts/chaos-tests/pod-failure.sh — deletes a random pod and validates K8s self-healing
• infrastructure/scripts/chaos-tests/network-latency.sh — injects latency via tc netem
• infrastructure/scripts/chaos-tests/resource-exhaustion.sh — CPU/memory stress on a running pod
• infrastructure/scripts/chaos-tests/failover.sh — scales deployment to 0 and restores, validates rollout
• infrastructure/scripts/run-chaos-experiment.sh — dispatcher for all experiments
• infrastructure/docs/chaos-engineering.md — usage docs

Issue #473 — Automated security hardening

• infrastructure/scripts/harden-security.sh — SSH hardening, UFW/iptables firewall rules, K8s service account audit, world-writable permission remediation, baseline pass/fail checks
• infrastructure/security/hardening-config.yml — declarative config for all hardening settings
• infrastructure/docs/security-hardening.md — usage docs

Issue #474 — Automated load testing

• infrastructure/scripts/load-tests/api-load-test.js — k6 script with ramp-up/sustained/peak stages and p95 < 500ms threshold
• infrastructure/scripts/load-tests/locustfile.py — Locust alternative
• infrastructure/scripts/run-load-test.sh — dispatcher supporting both k6 and Locust
• infrastructure/docs/load-testing.md — usage docs

Workflow Fixes

• Updated docs-generation.yml: added generate-infra-docs job, fixed git add to use || true for optional paths, added [skip ci] to auto-commit message to prevent loops

Testing

• All YAML workflows validated with python3 -c "import yaml; yaml.safe_load(...)"
• All scripts referenced in CI workflows confirmed to exist
• All new scripts are executable (chmod +x)

Closes #471
Closes #472
Closes #473
Closes #474

[drips-wave]

@authenticeasy-sys Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits