refactor: migrate to Taskfile and centralized reusable workflows

.dockerignore

@@ -2,6 +2,7 @@
 *
 
 # Include
+!Dockerfile
 !LICENSE
 !README.md
 !show-versions.sh

.editorconfig

@@ -0,0 +1,9 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = true

.github/dependabot.yml

@@ -16,6 +16,7 @@ updates:
     labels:
       - automatic
 
+
   # Enable version updates for pip
   - package-ecosystem: "pip"
     directory: "/"
@@ -24,4 +25,4 @@ updates:
     assignees:
       - "ChristophShyper"
     labels:
-      - automatic
+      - automatic

.github/workflows/auto-create-pull-request.yml

@@ -0,0 +1,20 @@
+name: (Auto) Create Pull Request
+
+on:
+  push:
+    branches-ignore:
+      - master
+      - main
+      - dependabot/**
+
+permissions:
+  contents: read
+  packages: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-auto-create-pull-request.yml@v1
+    with:
+      profile: dockerized
+    secrets: inherit

.github/workflows/cron-check-dependencies.yml

@@ -0,0 +1,19 @@
+name: (Cron) Weekly repository health
+
+on:
+  schedule:
+    - cron: 0 5 * * 1
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: read
+  packages: write
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-cron-check-dependencies.yml@v1
+    with:
+      profile: dockerized
+    secrets: inherit

.github/workflows/manual-sync-common-files.yml

@@ -0,0 +1,27 @@
+name: (Manual) Sync Common Files
+
+on:
+  workflow_dispatch:
+    inputs:
+      type:
+        description: File type to sync
+        required: true
+        default: all
+        type: choice
+        options:
+          - all
+          - configs
+          - ignores
+          - taskfiles
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-manual-sync-common-files.yml@v1
+    with:
+      sync-type: ${{ inputs.type }}
+      template-profile: dockerized
+    secrets: inherit

.github/workflows/manual-update-version.yml

@@ -0,0 +1,39 @@
+name: (Manual) Update Version
+
+on:
+  workflow_dispatch:
+    inputs:
+      type:
+        description: Bump type
+        required: false
+        default: patch
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+          - set
+      version:
+        description: Explicit version when type="set" (e.g., v1.2.3)
+        required: false
+        default: ''
+      build_only:
+        description: Build and push artifacts without version bump
+        required: false
+        default: false
+        type: boolean
+
+permissions:
+  contents: write
+  packages: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-manual-update-version.yml@v1
+    with:
+      bump-type: ${{ inputs.type }}
+      explicit-version: ${{ inputs.version }}
+      build-and-push-only: ${{ inputs.build_only }}
+      profile: dockerized
+    secrets: inherit

.gitignore

@@ -1,6 +1,12 @@
 # Intellij
-.idea/
+/.idea/
 *.iml
 
 # Custom
+.DS_Store
 .tmp/
+.venv
+.venv/
+.envrc
+.env
+.tmp

.hadolint.yaml

@@ -0,0 +1,24 @@
+failure-threshold: error
+format: tty
+strict-labels: false
+no-color: false
+no-fail: false
+disable-ignore-pragma: false
+trustedRegistries:
+  - docker.io
+  - ghcr.io
+
+# ignored: [string]
+# label-schema:
+#   author: text
+#   contact: email
+#   created: rfc3339
+#   version: semver
+#   documentation: url
+#   git-revision: hash
+#   license: spdx
+# override:
+#   error: [string]
+#   warning: [string]
+#   info: [string]
+#   style: [string]