refactor: adopt portigo infrastructure patterns

Add config package with build-tag-switched dev/prod environments,
structured logging via zerolog, Taskfile for dev workflow, golangci-lint
config, testutil package, and improved DB setup with proper SQLite
pragmas and cleanup. Rename sqlc output package from gen to repository.

Switch to allowlist .gitignore, Alpine+UPX+scratch Dockerfile, and
CI pipeline with test/lint gates before deploy.

.gitea/workflows/deploy.yml

@@ -1,14 +1,44 @@
-name: Deploy c4
+name: CI / Deploy
 
 on:
   push:
     branches: [main]
+  pull_request:
 
 env:
   DEPLOY_DIR: /home/ryan/c4
 
 jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.25"
+
+      - name: Run tests
+        run: go test ./...
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.25"
+
+      - name: Install golangci-lint
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest
+
+      - name: Run linter
+        run: golangci-lint run
+
   deploy:
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    needs: [test, lint]
     runs-on: games
     steps:
       - uses: actions/checkout@v4
@@ -21,8 +51,6 @@ jobs:
       - name: Ensure data directory exists with correct ownership
         run: |
           mkdir -p $DEPLOY_DIR/data
-          # UID 5 / GID 60 = games:games in the container (debian:bookworm-slim)
-          sudo chown 5:60 $DEPLOY_DIR/data
 
       - name: Rebuild and restart
         run: cd $DEPLOY_DIR && docker compose up -d --build --remove-orphans