#ci

Routine for red or stuck workflow runs: read the failing step, enable debug logs, reproduce locally, and match the error against the usual suspects.

The mental model: an event triggers a workflow, the workflow runs jobs on runners, each job runs steps, and steps run shell commands or reusable actions.

Our end-to-end pipeline in one file: test on every PR, build and push to GHCR on main and tags, auto-deploy staging, approval-gated production. Copy, rename the image and go.

A complete, minimal CI workflow where every single line is explained: name, triggers, permissions, concurrency, jobs, runner, steps, actions, inputs and commands.