feat(terraform): implement App of Apps bootstrap for local/prod and migrate Tekton image builds to Buildah

.github/workflows/operator-ci.yml

@@ -30,13 +30,13 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26"
+          go-version-file: apps/operator/go.mod
           cache-dependency-path: apps/operator/go.sum
 
       - name: Run linter
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.11.3
+          version: v2.12.2
           working-directory: apps/operator
 
   test:
@@ -52,7 +52,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26"
+          go-version-file: apps/operator/go.mod
           cache-dependency-path: apps/operator/go.sum
 
       - name: Run tests

.github/workflows/portal-ci.yml

@@ -11,8 +11,11 @@ on:
 
 jobs:
   build-and-test:
-    name: Build and Check
+    name: Build and Check (Node ${{ matrix.node-version }})
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: ["22", "24"]
     defaults:
       run:
         working-directory: apps/portal
@@ -24,7 +27,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: "24"
+          node-version: ${{ matrix.node-version }}
           cache: "yarn"
           cache-dependency-path: "apps/portal/yarn.lock"
 

.gitignore

@@ -16,4 +16,14 @@ apps/portal/packages/backend/*.sqlite
 .idea
 
 # mise
-mise.toml
+mise.toml
+
+# Terraform local cache and state files
+**/.terraform/
+**/*.tfstate
+**/*.tfstate.backup
+**/*.tfstate.lock.info
+
+# AI skills
+skills-lock.json
+.agents/