[codex] Estabilizar release final do Stella

.github/workflows/cd.yml

@@ -43,4 +43,22 @@ jobs:
           sudo k3s kubectl get pods -n platform -o wide
           sudo k3s kubectl describe deployment stella-api -n platform
           sudo k3s kubectl get events -n platform --sort-by=.lastTimestamp | tail -80
-          sudo k3s kubectl logs -n platform deployment/stella-api --all-containers=true --tail=200 || true
+
+          NEW_RS="$(sudo k3s kubectl get replicasets -n platform \
+            -l app=stella-api \
+            --sort-by=.metadata.creationTimestamp \
+            -o jsonpath='{.items[-1:].metadata.name}')"
+          POD_HASH="$(sudo k3s kubectl get replicaset "$NEW_RS" -n platform \
+            -o jsonpath='{.metadata.labels.pod-template-hash}')"
+
+          echo "ReplicaSet novo: $NEW_RS"
+          sudo k3s kubectl describe replicaset "$NEW_RS" -n platform
+
+          for pod in $(sudo k3s kubectl get pods -n platform \
+            -l "app=stella-api,pod-template-hash=$POD_HASH" \
+            -o name); do
+            echo "Diagnóstico de $pod"
+            sudo k3s kubectl describe -n platform "$pod"
+            sudo k3s kubectl logs -n platform "$pod" --all-containers=true --tail=200 || true
+            sudo k3s kubectl logs -n platform "$pod" --all-containers=true --previous --tail=200 || true
+          done

.github/workflows/ci.yml

@@ -44,11 +44,13 @@ jobs:
         with:
           scan-type: fs
           scan-ref: .
+          skip-dirs: .claude
           vuln-type: os,library
           severity: CRITICAL,HIGH
           format: table
           output: trivy-report.txt
-          exit-code: '0'
+          ignore-unfixed: true
+          exit-code: '1'
 
       - name: Upload security scan report
         uses: actions/upload-artifact@v4

frontend/angular.json

@@ -96,6 +96,13 @@
             }
           },
           "defaultConfiguration": "development"
+        },
+        "test": {
+          "builder": "@angular/build:unit-test",
+          "options": {
+            "tsConfig": "tsconfig.spec.json",
+            "runner": "vitest"
+          }
         }
       }
     }