ci: add GitHub Actions workflow and Dependabot config

Two-job CI workflow that runs on push to main and on PRs:

1. lint-and-unit: ruff check + ruff format --check + 278 unit tests.
   Pure Python, no infrastructure, completes in under a minute.

2. integration: spins up Redis 7-alpine + NATS 2-alpine (with
   --jetstream + --http_port 8222 matching docker-compose.yml) as
   bare docker containers (services: block cannot pass a command
   override to NATS), waits for both health probes, installs deps,
   runs the 21 fast integration tests. Service logs dumped on
   failure for debugging. The 3 slow integration tests are not run
   in CI — they need a local Ollama model.

Concurrency group cancels in-progress runs on the same ref so
rapid pushes do not queue up.

Dependabot configured for three ecosystems on a weekly Monday
schedule:
- pip (requirements.txt) — minor+patch updates batched into one PR
- github-actions (workflow files)
- docker (Dockerfile base image)

Commit prefixes configured per ecosystem: chore(deps), chore(ci),
chore(docker).

Co-Authored-By: Rooty

Author: Wintersta7e

.github/dependabot.yml

@@ -0,0 +1,37 @@
+version: 2
+updates:
+  # Python dependencies from requirements.txt
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "chore(deps)"
+    groups:
+      # Batch minor/patch updates of all Python deps into a single PR
+      python-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # GitHub Actions versions in .github/workflows
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "chore(ci)"
+
+  # Docker base image in Dockerfile
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "chore(docker)"

.github/workflows/ci.yml

@@ -0,0 +1,96 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint-and-unit:
+    name: Lint + unit tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: requirements.txt
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
+          pip install ruff
+
+      - name: Ruff check
+        run: ruff check .
+
+      - name: Ruff format check
+        run: ruff format --check .
+
+      - name: Run unit tests
+        run: pytest tests/ --ignore=tests/integration -v
+
+  integration:
+    name: Fast integration tests
+    runs-on: ubuntu-latest
+    needs: lint-and-unit
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: requirements.txt
+
+      - name: Start Redis
+        run: |
+          docker run -d --name redis -p 6379:6379 redis:7-alpine
+
+      - name: Start NATS with JetStream
+        run: |
+          docker run -d --name nats -p 4222:4222 -p 8222:8222 \
+            nats:2-alpine --jetstream --http_port 8222
+
+      - name: Wait for services to become healthy
+        run: |
+          for i in $(seq 1 30); do
+            if docker exec redis redis-cli ping 2>/dev/null | grep -q PONG \
+               && curl -sf http://localhost:8222/healthz > /dev/null 2>&1; then
+              echo "Services ready"
+              exit 0
+            fi
+            sleep 1
+          done
+          echo "Services failed to become ready within 30 seconds"
+          docker logs redis || true
+          docker logs nats || true
+          exit 1
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
+
+      - name: Run fast integration tests
+        run: pytest tests/integration/ -m "not slow" -v
+
+      - name: Dump service logs on failure
+        if: failure()
+        run: |
+          echo "=== Redis logs ==="
+          docker logs redis || true
+          echo "=== NATS logs ==="
+          docker logs nats || true