feat: migrate to Scone prod

[PierreJeanjacquot]

migrate iapp from Scone debug to Scone prod

changes

API:

• Added sconeProd boolean option to sconify in production (default false for backward compatibility)
• start script generates a new signing key in sig/enclave-key.pem if not found
• --command option is no longer passed to the scone CLI (according to Scone team, this was useless)

CLI:

⚠️ the API must be deployed before the CLI publication

• Switched stack to use scone prod (SMS, Workerpool)
• Updated API request with sconeProd: true to use sconification in prod mode

CI:

• signing key mounted from host (RO) for API deployment
• Added server configuration files check before deploying the API

tests

deployed app with successful run on prod workerpool:

• bellecour: https://explorer.iex.ec/bellecour/app/0xf6f6b7e5a6208e77de88ed8a59e56ab5177c5a32
• arbitrum: https://explorer.iex.ec/arbitrum-mainnet/app/0x156333bc13c422633754b828a5f64ee2180fd342
• arbitrum-sepolia: https://explorer.iex.ec/arbitrum-sepolia-testnet/app/0x6b82d0171f42b793e30957334c5995fd7ed24e6b

[github-actions]

🐳 Hadolint Dockerfile Lint Results

Click to expand detailed results

api/Dockerfile:4 DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`

[Copilot]

Pull Request Overview

This PR migrates the iapp from Scone debug mode to Scone production mode, updating both the CLI and API to use production workerpools and enabling production-mode sconification with proper signing key management.

• Switches CLI to use production workerpools instead of debug workerpools
• Adds sconeProd boolean option to API for production sconification with signing key mounting
• Updates deployment infrastructure to check for required configuration files and mount signing keys

Reviewed Changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
cli/src/utils/sconify.ts	Adds sconeProd: true to API requests for production mode
cli/src/utils/iexec.ts	Removes SMS debug URL parameter and renames function
cli/src/config/config.ts	Updates workerpool addresses from debug to production endpoints
cli/src/cmd/run.ts	Updates function call to use renamed getIExec
cli/src/cmd/deploy.ts	Updates function call to use renamed getIExec
cli/src/cmd/debug.ts	Updates function call to use renamed getIExec
api/src/singleFunction/sconifyImage.ts	Adds production mode support with signing key mounting
api/src/sconify/sconifyBuild.service.ts	Adds sconeProd parameter and updates image tagging
api/src/sconify/sconifyBuild.handler.ts	Adds sconeProd to request schema and processing
api/src/sconify/deprecated_sconify.service.ts	Removes unused entrypoint parameter
api/package.json	Adds signing key generation to start scripts
api/docker-compose.yml	Mounts signing key directory as read-only
.github/workflows/reusable-api-deploy.yml	Adds configuration file checks before deployment

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.}

[abbesBenayache]

LGTM