feat: migrate receiptwitness to standalone repo with inlined common

Extract receiptwitness/ from the monorepo into cartsnitch/receiptwitness.
Inline the consumed modules from cartsnitch-common so there is no
cross-repo dependency.

- Add src/receiptwitness/shared/ with inlined models, schemas, constants, database
- Update all imports from cartsnitch_common to receiptwitness.shared
- Remove cartsnitch-common dependency from pyproject.toml
- Copy and update Alembic config (alembic.ini, alembic/)
- Update Dockerfile for standalone build context, add migration CMD
- Add CI workflow with lint, test, build, grype scan, deploy-dev, deploy-uat
- Add .grype.yaml

Co-Authored-By: Paperclip <noreply@paperclip.ing>

This commit is contained in:

Barcode Betty

2026-04-19 12:18:11 +00:00

parent bf7cabc9d8

commit f47da487da

30 changed files with 898 additions and 33 deletions

									
										.grype.yaml
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				ignore:

				  # Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely

				  - vulnerability: CVE-2025-13836

				  - vulnerability: CVE-2026-4519