Add dev harness routing all builds through the digest-pinned builder

Every compile/vet/test path goes through the same golang:1.26-bookworm digest container used by mopac-keyproxy, so the host stays toolchain-free and builds are reproducible. Makefile is a thin front door over dev.sh.
2026-08-29 00:08:22 -05:00
parent d8c781dffb
commit c8bae4961a
4 changed files with 81 additions and 0 deletions
@@ -0,0 +1,5 @@
+# Credentials NEVER live in the repo. Any *.env landing here is ignored
+# as a tripwire (env.example is the only committed shape).
+*.env
+bin/
+.smoke/