fix(api): only enable Redis TLS when using rediss:// scheme, improve CI health wait

The Redis client was unconditionally applying TLS config, causing
connection failures when using plain redis:// URLs (like in tests).
Now TLS is only applied when the URL scheme is rediss://.

Also replaced docker compose --wait with a manual polling loop that
dumps API logs on failure for better debugging.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: AchoArnold

.github/workflows/integration-test.yml

@@ -30,7 +30,25 @@ jobs:
 
       - name: Start services 🐳
         working-directory: ./tests
-        run: docker compose up -d --build --wait
+        run: docker compose up -d --build
+
+      - name: Wait for services to be healthy
+        working-directory: ./tests
+        run: |
+          echo "Waiting for API to be healthy..."
+          for i in $(seq 1 40); do
+            if docker compose exec api wget --spider -q http://localhost:8000/ 2>/dev/null; then
+              echo "API is healthy!"
+              break
+            fi
+            if [ $i -eq 40 ]; then
+              echo "API failed to become healthy"
+              docker compose logs api
+              exit 1
+            fi
+            echo "Attempt $i/40 - waiting 5s..."
+            sleep 5
+          done
 
       - name: Wait for seed to complete
         working-directory: ./tests

api/pkg/di/container.go

@@ -419,8 +419,10 @@ func (container *Container) Cache() cache.Cache {
 	if err != nil {
 		container.logger.Fatal(stacktrace.Propagate(err, fmt.Sprintf("cannot parse redis url [%s]", os.Getenv("REDIS_URL"))))
 	}
-	opt.TLSConfig = &tls.Config{
-		MinVersion: tls.VersionTLS12,
+	if strings.HasPrefix(os.Getenv("REDIS_URL"), "rediss://") {
+		opt.TLSConfig = &tls.Config{
+			MinVersion: tls.VersionTLS12,
+		}
 	}
 
 	redisClient := redis.NewClient(opt)