chore(audit): execute 2026-06-03 audit — digest pins, healthchecks, explicit concurrency, prod log hygiene#116

Merged

agjs merged 7 commits into

mainfrom

chore/audit-fixes-20260603-1340

Jun 3, 2026

Commits on Jun 3, 2026

fix(build): pin ui Dockerfile.prod builder base image by sha256 digest
agjs
committed
test(api): cover engine-pin-parity lint-meta rule directly
agjs
committed
fix(infra): add healthchecks to prod ui and traefik, guard via CI
agjs
committed
fix(ui): stop emitting structured log entries to the prod console
agjs
committed
fix(ci): make cancel-in-progress explicit wherever concurrency is set
agjs
committed
fix(docs): route package.json scripts through bun and refresh catalog
agjs
committed
fix(ui): generate e2e consent timestamp at runtime via now()
agjs
committed