feat(system): DPLAN-0133 Phase 1 (part 1/2): add gitignore rule for apps/integrations/** with README negation, plus scaffold README.md in all 10 core branches' apps/integrations/ — private integration space is now leak-proof by construction. Drivers and wrappers dropped here stay local; only README.md is tracked. See DPLAN-0133 for architecture rationale (three-layer design: @api drivers, per-branch wrappers, public generic contracts). #540

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.13"
	- run: pip install ruff
	- run: ruff check src/ tests/
	- run: ruff format --check src/ tests/

	test:
	needs: lint
	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.10", "3.11", "3.12", "3.13"]
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	- run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	- run: coverage run -m pytest -v --tb=short --rootdir=.
	- run: coverage report --fail-under=70

	coverage:
	name: coverage
	needs: [test]
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.13"
	- run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	- run: coverage run -m pytest --rootdir=.
	- run: coverage xml
	- uses: codecov/codecov-action@v6
	with:
	files: ./coverage.xml
	fail_ci_if_error: false

Provide feedback