[PROD-001] feat: Complete production deployment setup

✅ Fixed critical issues:
- Fixed .dockerignore to include assets (logo.png, banner-3.gif, custom.css)
- Added psutil dependency for metrics endpoint
- Connected health check endpoints to Reflex app

✅ Added complete CI/CD pipeline:
- Woodpecker.yml with 11 stages (lint, build, scan, deploy)
- Harbor registry integration
- ArgoCD automated deployment
- Kubernetes health checks

✅ Enhanced security:
- Multi-stage Docker build
- Non-root user container
- Security scanning ready
- Network policies configured

✅ Complete documentation:
- Production deployment guide (50+ pages)
- Quick start guide (10 minutes)
- Deployment checklist
- Changelog

🚀 Production ready with automated GitOps deployment!

ApprovalToken: PROD-001

argocd/application-staging.yaml

@@ -3,8 +3,14 @@ kind: Application
 metadata:
   name: peikarband-staging
   namespace: argocd
+  annotations:
+    notifications.argoproj.io/subscribe.on-deployed.telegram: ""
+    notifications.argoproj.io/subscribe.on-sync-failed.telegram: ""
   finalizers:
     - resources-finalizer.argocd.argoproj.io
+  labels:
+    app: peikarband
+    environment: staging
 spec:
   project: default
   
@@ -16,6 +22,11 @@ spec:
       releaseName: peikarband-staging
       valueFiles:
         - values-staging.yaml
+      parameters:
+        - name: image.repository
+          value: harbor.peikarband.ir/peikarband/landing
+        - name: image.tag
+          value: develop
   
   destination:
     server: https://kubernetes.default.svc

argocd/application.yaml

@@ -3,19 +3,31 @@ kind: Application
 metadata:
   name: peikarband
   namespace: argocd
+  annotations:
+    notifications.argoproj.io/subscribe.on-deployed.telegram: ""
+    notifications.argoproj.io/subscribe.on-health-degraded.telegram: ""
+    notifications.argoproj.io/subscribe.on-sync-failed.telegram: ""
   finalizers:
     - resources-finalizer.argocd.argoproj.io
+  labels:
+    app: peikarband
+    environment: production
 spec:
   project: default
   
   source:
     repoURL: https://git.peikarband.ir/ehsan-minadd/peikarband.git
-    targetRevision: HEAD
+    targetRevision: main
     path: helm/peikarband
     helm:
       releaseName: peikarband
       valueFiles:
         - values-production.yaml
+      parameters:
+        - name: image.repository
+          value: harbor.peikarband.ir/peikarband/landing
+        - name: image.tag
+          value: latest  # This will be updated by CI/CD
   
   destination:
     server: https://kubernetes.default.svc
@@ -30,6 +42,7 @@ spec:
       - CreateNamespace=true
       - PrunePropagationPolicy=foreground
       - PruneLast=true
+      - ApplyOutOfSyncOnly=true
     retry:
       limit: 5
       backoff:
@@ -44,4 +57,8 @@ spec:
       kind: Deployment
       jsonPointers:
         - /spec/replicas
+    - group: apps
+      kind: StatefulSet
+      jsonPointers:
+        - /spec/replicas