Production hardening — Husky pre-push, GitHub Actions CI, Dockerfile

[kernvex]

Closes #6.

Production-readiness scaffolding that gates and packages the finished service.

What's here

• Husky pre-push hook runs npm run verify (typecheck → lint → test, fail-fast). Escape hatch git push --no-verify documented in the hook and README.
• GitHub Actions CI (.github/workflows/ci.yml) mirrors the gate on push/PR — Node 20, npm ci, typecheck, lint, test — then a docker build job (push: false, gated on needs: verify).
• Multi-stage Dockerfile — builder compiles TypeScript; slim runtime runs dev-dependency-free as the non-root node user, with the data/ catalogue seed copied in (the app reads it from cwd at startup). HEALTHCHECK probes GET /health via Node's global fetch (no curl/wget in the image).
• .dockerignore excludes node_modules, dist, .git, tests, coverage — keeps data/.
• README with CI badge, endpoints, scripts, quality-gate, and Docker docs.

Acceptance criteria — all met

• Husky pre-push: typecheck → lint → test, fail-fast; --no-verify documented
• CI mirrors the hook on push/PR
• CI docker-build job (no registry push)
• Multi-stage Dockerfile: slim, dev-dep-free, non-root node
• .dockerignore excludes node_modules, dist, .git, tests, coverage
• HEALTHCHECK targets GET /health
• CI badge in README (renders green after first run)

Verification

• Hook fail-fast proven with an injected type error: aborted at typecheck (exit 2), lint/tests never ran.
• Image built locally; container runs as node, serves /health and /hotels, and Docker health status reached healthy (probe exit 0).
• npm run verify green: 54 tests pass, typecheck + lint clean.

🤖 Generated with Claude Code