Scope
Generate two-layer CI/CD templates + harden deployment state/secrets. Emit GitHub Actions templates for the shipped targets (compose→GHCR image, Deno Deploy push, bare-metal compile), and make Aspire deployment-state caching CI-safe (~/.aspire/deployments/*.json currently stores secrets in plaintext).
Target / adapter
CI/CD + state/secret hardening (cross-target tooling).
Acceptance criteria
- Generated GH Actions workflow templates per shipped target.
- Aspire state cache no longer persists plaintext secrets in CI; documented handling.
- A promotion path between Aspire environments (dev→staging→prod) documented.
Dependencies
S6 (#342, Deno Deploy) + S7 (#343, compose) as the targets to template — both CLOSED; this slice is unblocked.
Tier / phase
Epic-internal phase 4. Live milestone: 0.0.1-beta.5 (milestone field is authoritative; earlier "stable" wording here predated the roadmap-expansion re-forecast).
Parent epic: #327
Part of #327
Scope
Generate two-layer CI/CD templates + harden deployment state/secrets. Emit GitHub Actions templates for the shipped targets (compose→GHCR image, Deno Deploy push, bare-metal compile), and make Aspire deployment-state caching CI-safe (
~/.aspire/deployments/*.jsoncurrently stores secrets in plaintext).Target / adapter
CI/CD + state/secret hardening (cross-target tooling).
Acceptance criteria
Dependencies
S6 (#342, Deno Deploy) + S7 (#343, compose) as the targets to template — both CLOSED; this slice is unblocked.
Tier / phase
Epic-internal phase 4. Live milestone: 0.0.1-beta.5 (milestone field is authoritative; earlier "stable" wording here predated the roadmap-expansion re-forecast).
Parent epic: #327
Part of #327