Move CI workflows to repo root .gitea/workflows/ (Gitea requires root location)

- 6 per-product CI workflows with path filters
- P1: Rust (cargo test + clippy + fmt)
- P2: Go agent (go test + vet) + Node SaaS (tsc + npm test)
- P3-P6: Node (npm ci + tsc + npm test)
- Removed old per-product .gitea dirs (Gitea ignores non-root workflows)

.gitea/workflows/ci-p1-route.yml

@@ -0,0 +1,37 @@
+name: CI — P1 Route (Rust)
+on:
+  push:
+    branches: [main]
+    paths: ['products/01-llm-cost-router/**']
+  pull_request:
+    paths: ['products/01-llm-cost-router/**']
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-${{ hashFiles('products/01-llm-cost-router/Cargo.lock') }}
+
+      - name: Run tests
+        run: cargo test --workspace
+        working-directory: products/01-llm-cost-router
+
+      - name: Clippy
+        run: cargo clippy --workspace -- -D warnings
+        working-directory: products/01-llm-cost-router
+
+      - name: Format check
+        run: cargo fmt --check
+        working-directory: products/01-llm-cost-router

.gitea/workflows/ci-p2-drift.yml

@@ -0,0 +1,46 @@
+name: CI — P2 Drift (Go + Node)
+on:
+  push:
+    branches: [main]
+    paths: ['products/02-iac-drift-detection/**']
+  pull_request:
+    paths: ['products/02-iac-drift-detection/**']
+
+jobs:
+  agent:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+
+      - name: Test agent
+        run: go test ./...
+        working-directory: products/02-iac-drift-detection/agent
+
+      - name: Vet
+        run: go vet ./...
+        working-directory: products/02-iac-drift-detection/agent
+
+  saas:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install deps
+        run: npm ci
+        working-directory: products/02-iac-drift-detection/saas
+
+      - name: Type check
+        run: npx tsc --noEmit
+        working-directory: products/02-iac-drift-detection/saas
+
+      - name: Test
+        run: npm test
+        working-directory: products/02-iac-drift-detection/saas

.gitea/workflows/ci-p3-alert.yml

@@ -0,0 +1,29 @@
+name: CI — P3 Alert
+on:
+  push:
+    branches: [main]
+    paths: ['products/03-alert-intelligence/**']
+  pull_request:
+    paths: ['products/03-alert-intelligence/**']
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install deps
+        run: npm ci
+        working-directory: products/03-alert-intelligence
+
+      - name: Type check
+        run: npx tsc --noEmit
+        working-directory: products/03-alert-intelligence
+
+      - name: Test
+        run: npm test
+        working-directory: products/03-alert-intelligence

.gitea/workflows/ci-p4-portal.yml

@@ -0,0 +1,29 @@
+name: CI — P4 Portal
+on:
+  push:
+    branches: [main]
+    paths: ['products/04-lightweight-idp/**']
+  pull_request:
+    paths: ['products/04-lightweight-idp/**']
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install deps
+        run: npm ci
+        working-directory: products/04-lightweight-idp
+
+      - name: Type check
+        run: npx tsc --noEmit
+        working-directory: products/04-lightweight-idp
+
+      - name: Test
+        run: npm test
+        working-directory: products/04-lightweight-idp

.gitea/workflows/ci-p5-cost.yml

@@ -0,0 +1,29 @@
+name: CI — P5 Cost
+on:
+  push:
+    branches: [main]
+    paths: ['products/05-aws-cost-anomaly/**']
+  pull_request:
+    paths: ['products/05-aws-cost-anomaly/**']
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install deps
+        run: npm ci
+        working-directory: products/05-aws-cost-anomaly
+
+      - name: Type check
+        run: npx tsc --noEmit
+        working-directory: products/05-aws-cost-anomaly
+
+      - name: Test
+        run: npm test
+        working-directory: products/05-aws-cost-anomaly

.gitea/workflows/ci-p6-run.yml

@@ -0,0 +1,29 @@
+name: CI — P6 Run
+on:
+  push:
+    branches: [main]
+    paths: ['products/06-runbook-automation/**']
+  pull_request:
+    paths: ['products/06-runbook-automation/**']
+
+jobs:
+  saas:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install deps
+        run: npm ci
+        working-directory: products/06-runbook-automation/saas
+
+      - name: Type check
+        run: npx tsc --noEmit
+        working-directory: products/06-runbook-automation/saas
+
+      - name: Test
+        run: npm test
+        working-directory: products/06-runbook-automation/saas