CI/CD features, checks, github actions config, etc.

[chrisyecora]

Key Changes

• CI/CD Workflows:
  • Added .github/workflows/pr.yml: Automatically runs linting and pytest on all
    Pull Requests.
  • Added .github/workflows/deploy.yml: Automates sam build and sam deploy to
    the production stack upon merge to main.
• Security & Secrets:
  • Migrated sensitive credentials (Plaid/Discord) from local environment
    variables to AWS Secrets Manager.
  • Updated config.py to fetch secrets at runtime, improving security and
    removing the need for NoEcho parameters in CloudFormation.
  • Updated template.yaml with IAM policies granting Lambdas least-privilege
    access to Secrets Manager.
• Code Quality:
  • Integrated Ruff as the primary linter and formatter.
  • Added pyproject.toml to manage tool configurations and line-length
    standards.
• Project Structure:
  • Parameterized the SAM template to support bifurcated dev and prod stacks.

Verification Results

• Unit Tests: All 89 tests passed (including moto mocks for DynamoDB).
• Linting: All checks passed via ruff check ..
• Build: Validated sam build compatibility with new template structure.