Add CI workflow and Grype CVE ignores

- Add .github/workflows/ci.yml with build/push and deploy-dev/uat jobs
- Add .grype.yaml with Python 3.12 CVE ignores

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/workflows/ci.yml

@@ -169,4 +169,4 @@ jobs:
           git diff --cached --quiet && echo "No changes" && exit 0
           git commit -m "ci(uat): update auth image from cartsnitch/auth CI"
           git pull --rebase origin main
-          git push origin main
+          git push origin main

.grype.yaml

@@ -0,0 +1,4 @@
+ignore:
+  # Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
+  - vulnerability: CVE-2025-13836
+  - vulnerability: CVE-2026-4519