feat: migrate receiptwitness to standalone repo with inlined common

Extract receiptwitness/ from the monorepo into cartsnitch/receiptwitness.
Inline the consumed modules from cartsnitch-common so there is no
cross-repo dependency.

- Add src/receiptwitness/shared/ with inlined models, schemas, constants, database
- Update all imports from cartsnitch_common to receiptwitness.shared
- Remove cartsnitch-common dependency from pyproject.toml
- Copy and update Alembic config (alembic.ini, alembic/)
- Update Dockerfile for standalone build context, add migration CMD
- Add CI workflow with lint, test, build, grype scan, deploy-dev, deploy-uat
- Add .grype.yaml

Co-Authored-By: Paperclip <noreply@paperclip.ing>

tests/test_pipeline/conftest.py

@@ -1,7 +1,7 @@
 """Shared test fixtures for pipeline tests."""
 
 import pytest
-from cartsnitch_common.models.base import Base
+from receiptwitness.shared.models import Base
 from sqlalchemy import create_engine
 from sqlalchemy.orm import sessionmaker
 

tests/test_pipeline/test_matching.py

@@ -4,9 +4,9 @@ import uuid
 from datetime import UTC, datetime
 from decimal import Decimal
 
-from cartsnitch_common.constants import MatchConfidence
-from cartsnitch_common.models.product import NormalizedProduct
-from cartsnitch_common.schemas.purchase import PurchaseItemCreate
+from receiptwitness.shared.constants import MatchConfidence
+from receiptwitness.shared.models import NormalizedProduct
+from receiptwitness.shared.schemas import PurchaseItemCreate
 
 from receiptwitness.pipeline.matching import (
     ProductMatcher,

tests/test_pipeline/test_normalization.py

@@ -3,7 +3,7 @@
 import uuid
 from datetime import UTC, datetime
 
-from cartsnitch_common.models.product import NormalizedProduct
+from receiptwitness.shared.models import NormalizedProduct
 
 from receiptwitness.pipeline.normalization import (
     MatchMethod,