feat: comprehensive CLI refactoring and infrastructure improvements

[piewared]

Major Changes:

• Refactored CLI to use dependency injection pattern with CLIContext
• Consolidated database workflows into shared package eliminating ~600 lines of duplication
• Split monolithic entity command (555 lines) into modular package
• Added ComposeRunner helper for consistent docker-compose operations
• Consolidated deployer base with restart_container method
• Introduced DbRuntime protocol with Compose and K8s adapters

Database & Infrastructure:

• Fixed Redis authentication issue in development environment
• Fixed test_07 container detection bug with exact regex matching
• Removed redundant get_settings() call in run_sync workflow
• Added PostgreSQL TLS verification job for Helm deployments
• Improved secret management flow and documentation

Testing:

• Added comprehensive workflow integration tests (test_db_runtime.py, test_db_workflows.py)
• Improved test coverage for CLI context and database workflows
• Fixed Loguru logging errors during test runs
• All tests passing (15/15 in db_runtime, 15/15 in db_workflows)

Documentation:

• Updated security documentation for OIDC hardening
• Documented refresh token policy and JWKS cache controls
• Added secrets management flow documentation
• Improved deployment and Helm migration documentation

Code Quality:

• Fixed type annotations (runtime_k8s.py)
• Removed dead code (helpers.py, cleanup scripts)
• Improved imports and code organization
• Maintained strict mypy compliance

Files Changed: 132 files, +12091 insertions, -2140 deletions