ops: add CI/CD pipeline, a/b rolling deploy, Gitea Actions workflow

- .gitea/workflows/deploy.yml — push-to-main triggers rolling deploy
- scripts/deploy-bluegreen.sh — a-stack then b-stack restart; Maven runs
  in Docker (no JDK needed on runner host); Caddy reload at end
- scripts/deploy-all.ps1 — emergency manual deploy from dev machine
- infra/docker-compose.yml — a/b pairs per service; wget health checks;
  Gitea service; Prometheus/Grafana/DB ports restricted to localhost
- infra/Caddyfile — dual upstreams with health-based routing
- infra/Dockerfile.* — one per service
- infra/prometheus.yml + grafana provisioning

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apix-common/src/main/java/org/botstandards/apix/common/OrgEventType.java

@@ -0,0 +1,17 @@
+package org.botstandards.apix.common;
+
+public enum OrgEventType {
+    REGISTERED,
+    LEVEL_EARNED,
+    UPGRADE_REQUESTED,
+    VERIFICATION_FAILED,
+    TEMP_GRANTED,
+    TEMP_REVOKED,
+    TEMP_EXPIRED,
+    LEVEL_REVOKED,
+    KEY_ROTATED,
+    TAN_ISSUED,
+    DNS_ROTATION_INITIATED,
+    FRAUD_REPORTED,
+    FRAUD_LOCK_CLEARED
+}

apix-common/src/main/java/org/botstandards/apix/common/VerificationResult.java

@@ -3,5 +3,22 @@ package org.botstandards.apix.common;
 public record VerificationResult(
         OLevel oLevelAchieved,
         String blockedAtStep,
-        String message
-) {}
+        String message,
+        String detectedLei
+) {
+    public static VerificationResult success(OLevel level) {
+        return new VerificationResult(level, null, null, null);
+    }
+
+    public static VerificationResult success(OLevel level, String lei) {
+        return new VerificationResult(level, null, null, lei);
+    }
+
+    public static VerificationResult failure(OLevel partialLevel, String step, String message) {
+        return new VerificationResult(partialLevel, step, message, null);
+    }
+
+    public boolean succeeded() {
+        return blockedAtStep == null;
+    }
+}

apix-common/src/main/java/org/botstandards/apix/common/VerificationStatus.java

@@ -0,0 +1,10 @@
+package org.botstandards.apix.common;
+
+public enum VerificationStatus {
+    PENDING,
+    VERIFYING,
+    ACHIEVED,
+    FAILED,
+    MANUAL_REVIEW,
+    SUSPENDED
+}