ci: add caching, test reliability, deployment notifications, and workflow dedup

- Add .dockerignore to reduce Docker build context
- Add pip caching and BuildKit cache mounts for faster builds
- Make tests non-optional (must pass if they exist)
- Split deploy.yml into test + deploy jobs
- Add GitHub Deployment API integration
- Simplify validate.yml to use reusable workflow from .github org repo

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: baijum

.dockerignore

@@ -0,0 +1,12 @@
+.git
+.github
+.claude
+__pycache__
+*.pyc
+.pytest_cache
+.env
+.env.*
+docs/
+plans/
+*.md
+!requirements.txt

.github/workflows/deploy.yml

@@ -5,20 +5,47 @@ on:
     branches: [main]
 
 jobs:
-  deploy:
+  test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+          cache: 'pip'
 
       - name: Run tests
         run: |
           pip install -r requirements.txt
           pip install pytest
-          pytest --tb=short || echo "No tests found, skipping"
+          if python -m pytest --collect-only -q 2>/dev/null | grep -q "test"; then
+            pytest --tb=short
+          else
+            echo "No tests found, skipping"
+          fi
+
+  deploy:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Create deployment
+        id: deployment
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const deployment = await github.rest.repos.createDeployment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              ref: context.sha,
+              environment: 'production',
+              auto_merge: false,
+              required_contexts: [],
+              description: `Deploy ${context.sha.substring(0, 7)} to production`
+            });
+            return deployment.data.id;
 
       - name: Deploy to server
         uses: appleboy/ssh-action@v1
@@ -79,3 +106,30 @@ jobs:
             }
             CADDYEOF
             docker compose -f /opt/platform/docker-compose.yml exec -T caddy caddy reload --config /etc/caddy/Caddyfile
+
+      - name: Update deployment status (success)
+        if: success()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.createDeploymentStatus({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              deployment_id: ${{ steps.deployment.outputs.result }},
+              state: 'success',
+              environment_url: `https://${{ secrets.APP_DOMAIN }}`,
+              description: 'Deployment succeeded'
+            });
+
+      - name: Update deployment status (failure)
+        if: failure()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.createDeploymentStatus({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              deployment_id: ${{ steps.deployment.outputs.result }},
+              state: 'failure',
+              description: 'Deployment failed'
+            });

.github/workflows/validate.yml

@@ -6,20 +6,4 @@ on:
 
 jobs:
   validate:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - uses: actions/checkout@v4
-        with:
-          repository: towlion/platform
-          path: _platform
-        continue-on-error: true
-
-      - name: Run spec validator
-        if: success()
-        run: python _platform/validator/validate.py --tier 2 --dir .
+    uses: towlion/.github/.github/workflows/validate.yml@main

app/Dockerfile

@@ -1,11 +1,13 @@
+# syntax=docker/dockerfile:1
 FROM python:3.11-slim AS base
 
 RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 
 COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install -r requirements.txt
 
 COPY app/ ./app/