ops(ci): automate testing and container image releases

Add PostgreSQL-backed Go validation for application changes and semantic-version release publishing to GHCR.

Default deployments to the public image and prevent host setup from starting the application before deployment.

ansible/inventory/group_vars/all/main.yml.example

@@ -1,5 +1,5 @@
 app_user: todo
-app_image: registry.example.com/todo:latest
+app_image: ghcr.io/cole-maxwell1/todo-hetzner:latest
 app_port: 8080
 app_db_name: todo
 app_db_user: todo_app

ansible/roles/app/tasks/main.yml

@@ -61,9 +61,9 @@
     XDG_RUNTIME_DIR: "/run/user/{{ app_user_uid }}"
   changed_when: false
 
-- name: Enable application service
+- name: Enable application service without starting it
   ansible.builtin.command:
-    argv: [systemctl, --user, enable, --now, app-todo.service]
+    argv: [systemctl, --user, enable, app-todo.service]
   become_user: "{{ app_user }}"
   environment:
     XDG_RUNTIME_DIR: "/run/user/{{ app_user_uid }}"