ops: add CI/CD pipeline, a/b rolling deploy, Gitea Actions workflow

- .gitea/workflows/deploy.yml — push-to-main triggers rolling deploy
- scripts/deploy-bluegreen.sh — a-stack then b-stack restart; Maven runs
  in Docker (no JDK needed on runner host); Caddy reload at end
- scripts/deploy-all.ps1 — emergency manual deploy from dev machine
- infra/docker-compose.yml — a/b pairs per service; wget health checks;
  Gitea service; Prometheus/Grafana/DB ports restricted to localhost
- infra/Caddyfile — dual upstreams with health-based routing
- infra/Dockerfile.* — one per service
- infra/prometheus.yml + grafana provisioning

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

infra/prometheus.yml

@@ -0,0 +1,25 @@
+global:
+  scrape_interval: 15s
+  evaluation_interval: 15s
+
+scrape_configs:
+  - job_name: apix-registry
+    metrics_path: /q/metrics
+    static_configs:
+      - targets: ['registry:8180']
+        labels:
+          service: registry
+
+  - job_name: apix-spider
+    metrics_path: /q/metrics
+    static_configs:
+      - targets: ['spider:8082']
+        labels:
+          service: spider
+
+  - job_name: apix-portal
+    metrics_path: /q/metrics
+    static_configs:
+      - targets: ['portal:8081']
+        labels:
+          service: portal