CI/CD

feat(ci): harden the supply chain and build the server once #4667

Job	Run time
Detect changes	17s
Changesets / Verify changesets	28s
Actionlint	11s
Zizmor	27s
Build / App Server: Package	2m 6s
Quality / Webapp: Stories	5m 0s
Test / App Server: Unit and architecture	6m 43s
Quality / App Server	3m 39s
Quality / Webapp	4m 10s
Security / Dependencies, secrets, and policy	43s
Compose / Render compose stacks	33s
Test / App Server: Integration	8m 55s
Quality / Tooling and Docs	1m 27s
Security / New dependency risk	10s
Docker / Webapp / Build linux/amd64 Docker Image	2m 19s
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image	1m 14s
Docker / Agent: Pi / Build linux/amd64 Docker Image	59s
Docker / Tag unchanged images	-1s
Docker / Agent: Pi / Scan linux/amd64 Image	34s
Docker / Agent: Pi / Create manifest	0s
Docker / Postgres (pg_partman) / Scan linux/amd64 Image	37s
Docker / Postgres (pg_partman) / Create manifest	0s
Build / App Server: Generated artifacts	3m 14s
Build / App Server: Database	4m 15s
Build / App Server image / Build linux/amd64 Docker Image	3m 20s
Build / Webapp: E2E	2m 51s
Docker / Webapp / Scan linux/amd64 Image	32s
Docker / Webapp / Create manifest	-1s
Build / App Server image / Scan linux/amd64 Image	1m 6s
Build / App Server image / Create manifest	0s
CI Status Gate	11s
	55m 59s

Navigation Menu