ci: add Gitea Actions quality gate and GitHub mirror

- check job: lint + test + vet across both Go modules (root + ingestion)
- mirror job: pushes main + tags to github.com/mathiasb/hyperguild after check passes
- Taskfile: add VERSION/SHORT_SHA vars, fix build/lint/test/vet for multi-module,
  add tag and push tasks — matches cobalt-dingo conventions

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Taskfile.yml

@@ -1,7 +1,11 @@
 version: '3'
 
 vars:
-  PROJECT_NAME: '{{.PROJECT_NAME | default "myproject"}}'
+  PROJECT_NAME: hyperguild
+  VERSION:
+    sh: git describe --tags --always --dirty 2>/dev/null || echo "dev"
+  SHORT_SHA:
+    sh: git rev-parse --short HEAD
 
 tasks:
   context:sync:
@@ -19,65 +23,7 @@ tasks:
   context:sync:cursor:
     cmds: [bash scripts/context-sync.sh cursor]
 
-  dev:
-    desc: Start development server
-    cmds:
-      - go run ./cmd/server
-
-  build:
-    desc: Build the binary
-    cmds:
-      - go build -o bin/{{.PROJECT_NAME}} ./cmd/server
-
-  check:
-    desc: Run all checks (lint + test + vet)
-    cmds:
-      - task: lint
-      - task: test
-      - task: vet
-
-  lint:
-    cmds: [golangci-lint run ./...]
-  test:
-    cmds: [go test -race -count=1 ./...]
-  vet:
-    cmds:
-      - go vet ./...
-      - govulncheck ./... || true
-
-  up:
-    desc: Start containers
-    cmds: [docker compose up -d]
-  down:
-    cmds: [docker compose down]
-
-  init:
-    desc: Initialize a new project from this template
-    cmds:
-      - bash scripts/init.sh
-
-  supervisor:dev:
-    desc: Run supervisor MCP server (development)
-    cmds:
-      - go run ./cmd/supervisor
-
-  supervisor:build:
-    desc: Build supervisor binary
-    cmds:
-      - go build -o bin/supervisor ./cmd/supervisor
-
-  bridge:build:
-    desc: Build stdio↔HTTP bridge for Claude Code MCP integration
-    cmds:
-      - go build -o bin/supervisor-bridge ./cmd/bridge
-
-  supervisor:test:smoke:
-    desc: Smoke test supervisor via MCP (requires supervisor:dev running)
-    cmds:
-      - |
-        curl -s -X POST http://localhost:${SUPERVISOR_PORT:-3200}/mcp \
-          -H "Content-Type: application/json" \
-          -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | jq .
+  # ── Development ────────────────────────────────────────────────────────────
 
   start:
     desc: Start ingestion + supervisor (requires goreman — go install github.com/mattn/goreman@latest)
@@ -91,23 +37,95 @@ tasks:
       - lsof -ti:3200 | xargs kill -9 2>/dev/null || true
       - echo "hyperguild stopped"
 
-  ingestion:build:
-    desc: Build ingestion server binary
+  supervisor:dev:
+    desc: Run supervisor MCP server (development)
     cmds:
-      - go build -o bin/ingestion-server ./cmd/server
-    dir: ingestion
+      - go run ./cmd/supervisor
 
   ingestion:dev:
     desc: Run ingestion server in development mode
+    dir: ingestion
     env:
       INGEST_BRAIN_DIR: "{{.ROOT_DIR}}/brain"
       INGEST_PORT: "3300"
     cmds:
       - go run ./cmd/server
-    dir: ingestion
 
-  ingestion:test:
-    desc: Run ingestion tests
+  # ── Build ──────────────────────────────────────────────────────────────────
+
+  build:
+    desc: Build all binaries
     cmds:
-      - go test ./... -v
+      - task: supervisor:build
+      - task: bridge:build
+      - task: ingestion:build
+
+  supervisor:build:
+    desc: Build supervisor binary
+    cmds:
+      - go build -trimpath -ldflags="-s -w -X main.version={{.VERSION}}" -o bin/supervisor ./cmd/supervisor
+
+  bridge:build:
+    desc: Build stdio↔HTTP bridge for Claude Code MCP integration
+    cmds:
+      - go build -trimpath -ldflags="-s -w" -o bin/supervisor-bridge ./cmd/bridge
+
+  ingestion:build:
+    desc: Build ingestion server binary
     dir: ingestion
+    cmds:
+      - go build -trimpath -ldflags="-s -w" -o ../bin/ingestion-server ./cmd/server
+
+  # ── Quality ────────────────────────────────────────────────────────────────
+
+  check:
+    desc: Run all checks (lint + test + vet) across all modules
+    cmds:
+      - task: lint
+      - task: test
+      - task: vet
+
+  lint:
+    cmds:
+      - golangci-lint run ./...
+      - cd ingestion && golangci-lint run ./...
+
+  test:
+    cmds:
+      - go test -race -count=1 ./...
+      - cd ingestion && go test -race -count=1 ./...
+
+  vet:
+    cmds:
+      - go vet ./...
+      - govulncheck ./... || true
+      - cd ingestion && go vet ./...
+
+  supervisor:test:smoke:
+    desc: Smoke test supervisor via MCP (requires start running)
+    cmds:
+      - |
+        curl -s -X POST http://localhost:${SUPERVISOR_PORT:-3200}/mcp \
+          -H "Content-Type: application/json" \
+          -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | jq .
+
+  # ── Git / Release ──────────────────────────────────────────────────────────
+
+  tag:
+    desc: Create and push a semver tag  (usage — task tag version=v1.2.3)
+    preconditions:
+      - sh: '[[ "{{.version}}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$ ]]'
+        msg: "version must be semver, e.g. v1.2.3 or v1.2.3-rc.1"
+      - sh: "git diff --quiet && git diff --cached --quiet"
+        msg: "working tree must be clean before tagging"
+    cmds:
+      - git tag -a {{.version}} -m "Release {{.version}}"
+      - git push origin {{.version}}
+
+  push:
+    desc: Push current branch and tags to origin
+    vars:
+      BRANCH:
+        sh: git rev-parse --abbrev-ref HEAD
+    cmds:
+      - git push origin {{.BRANCH}} --tags