ci: add Gitea Actions workflow and Docker Compose test runner; add test image\n\ngovernance: encode CI/containers rules in system prompts and AGENTS templates; update proposal and docs

collab/proposals/01-codexhelper.md

@@ -42,7 +42,8 @@ Purpose: Implement a bash wrapper (CodexHelper) around codex-cli with “modes
 - TDD Governance: enforce test-driven development; require unit/integration tests for all features here and in generated projects.
 - Zero Technical Debt: safety first; always production-ready; no deferring tests/docs/refactors; leverage sub-agents when needed.
 - Planning/Architecture Governance: plan ahead via Questions→Proposal→Plan; keep a global architecture/module map; implement module-by-module; avoid refactors except when assumptions change and plans/docs are updated.
- - Clean Root Governance: keep repo root minimal; organize assets under `docs/`, `templates/`, `collab/`, `prompts/`, `modes/`, `scripts/`, `meta/`.
+- Clean Root Governance: keep repo root minimal; organize assets under `docs/`, `templates/`, `collab/`, `prompts/`, `modes/`, `scripts/`, `meta/`.
+ - CI/Containers Governance: use Gitea Actions with local parity via Docker Compose; do work inside containers; host for git/tea and Docker only; dependencies via Docker; explicit names and cleanup.
 
 ## Project Layout (generated)
 - `AGENTS.md` (from `templates/project/_shared/AGENTS.md`)
@@ -51,6 +52,7 @@ Purpose: Implement a bash wrapper (CodexHelper) around codex-cli with “modes
 - `codex.yaml` (project config)
 - `codex.sh` (entrypoint wrapper around codex-cli)
 - `runs/` (created on first run; ignored by VCS)
+ - `.gitea/workflows/` for CI; `docker/` for compose and Dockerfiles; `scripts/` for docker orchestration (tests, ci)
 
 ## Config Details
 - Format: YAML (`yq` for merging/reading)
@@ -105,7 +107,8 @@ Purpose: Implement a bash wrapper (CodexHelper) around codex-cli with “modes
 - Governance/Propagation honored: when norms change, update `prompts/global/` and AGENTS templates; log in DevLog.
 - TDD honored: a test suite (bats) covers CLI flows and guardrails; tests pass.
 - Zero Debt honored: code, tests, and docs complete; no debt items remain.
- - Clean Root honored: only essential files at root; scaffolding places assets under subdirectories.
+- Clean Root honored: only essential files at root; scaffolding places assets under subdirectories.
+ - CI/Containers honored: CI runs in Gitea and locally using the same Docker Compose; containers and networks use explicit names and are cleaned up.
 
 ## Open Items for Confirmation
 - Template coverage: include `prompts/style.md` by default? (we’ll include as optional, empty file)