Infrastructure

Version-controlled deployment templates, migrations, and canary configuration will live here.

This directory must not contain production secrets, live state, database contents, or unencrypted credentials. Applying infrastructure changes always requires a separate reviewed and reversible operation.