phase 0+1: project scaffold, k8s manifests, CI pipeline, steering, hooks, tests

- Repository structure for all services, infra, lakehouse, dashboards
- K8s manifests targeting stonks-oracle namespace with GHCR images
- Ingress via Traefik with ca-issuer TLS for internal services
- ConfigMap wired to existing cluster services (pg, redis, minio, ollama)
- GitHub Actions workflow for lint, test, multi-service container builds
- Dockerfile with build-arg CMD per service
- Makefile for local build/push/deploy
- Steering rules for TDD workflow, K8s conventions, project context
- Agent hooks for lint-on-save, test-on-save, k8s-validate, phase-commit
- Ruff linter config, all lint issues fixed
- 14 passing tests for schemas, config, redis keys
- PostgreSQL migrations, Trino catalogs, Superset config, MinIO lifecycle

tests/test_redis_keys.py

@@ -0,0 +1,31 @@
+"""Basic tests for Redis key conventions."""
+from services.shared.redis_keys import (
+    lock_key,
+    rate_limit_key,
+    queue_key,
+    dedupe_key,
+    cache_key,
+    QUEUE_INGESTION,
+    QUEUE_PARSING,
+)
+
+
+def test_lock_key_format():
+    assert lock_key("scheduler") == "stonks:lock:scheduler"
+
+
+def test_rate_limit_key_format():
+    assert rate_limit_key("news_api", "202604111200") == "stonks:ratelimit:news_api:202604111200"
+
+
+def test_queue_key_format():
+    assert queue_key(QUEUE_INGESTION) == "stonks:queue:ingestion"
+    assert queue_key(QUEUE_PARSING) == "stonks:queue:parsing"
+
+
+def test_dedupe_key_format():
+    assert dedupe_key("abc123").startswith("stonks:dedupe:")
+
+
+def test_cache_key_format():
+    assert cache_key("companies", "AAPL") == "stonks:cache:companies:AAPL"