20ae61c5e6
Adds a `cd` job to ci.yml that runs after the docker job on main branch pushes. It clones groombook/infra, updates image tags in api.yaml, web.yaml, migrate-job.yaml, and seed-job.yaml, then opens a PR with auto-merge enabled. Trade-off documented: deploy-dev uses kubectl set image directly, creating drift from the GitOps source of truth. The GitOps path via this PR is the correct approach for production. Co-Authored-By: Paperclip <noreply@paperclip.ing>