[DevOps] Setup CI/CD Pipeline

[NeftaliYagua]

Description

Setup comprehensive CI/CD pipeline using GitHub Actions for automated build, test, and deployment.

Acceptance Criteria

• Build workflow for .NET backend
• Build workflow for React frontend
• Automated unit tests on PR
• Automated integration tests on PR
• Code coverage reporting (Codecov)
• Linting and code quality checks
• Docker image building and scanning
• Automated deployment to staging on merge to develop
• Automated deployment to production on release tags
• Rollback strategy
• Notification on failures (Slack/Discord)
• Environment secrets management

Subtasks

• Create build-backend.yml workflow
• Create build-frontend.yml workflow
• Configure test runners (xUnit, Jest)
• Setup Codecov integration
• Add ESLint and Prettier checks
• Configure Docker buildx for multi-arch
• Setup container registry (GHCR)
• Add security scanning (Trivy, Snyk)
• Create deployment workflows
• Configure environment protection rules
• Add deployment notifications
• Document CI/CD process

Technical Notes

• Use GitHub Actions reusable workflows
• Cache dependencies for faster builds
• Use matrix strategy for parallel tests
• Implement semantic versioning
• Store secrets in GitHub Secrets
• Consider using GitHub Environments for staging/prod

[lbartoszcze]

Hi! For the CI/CD pipeline setup, here's one piece you can add right away — automated code review on every PR.

Li Code Review is a free GitHub Action (no API keys, no accounts) that catches bugs and security issues:

# .github/workflows/li-review.yml
name: Li Code Review
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read
  pull-requests: write
jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: lbartoszcze/li-agent/action@v1
        with:
          severity: 'warning'

Catches SQL injection, XSS, hardcoded secrets, empty catch blocks, and 30+ patterns across JavaScript, Python, Go, and more. Posts inline review comments.

See it in action: lbartoszcze/li-agent#1

I can open a PR adding this if helpful!