chore: import upstream snapshot with attribution

.github/workflows/docker-multiarch-test.yml

@@ -0,0 +1,156 @@
+name: Test Multi-Architecture Docker Build
+
+on:
+  workflow_call:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test-multiarch-build:
+    name: Test Multi-Arch Docker Build
+    strategy:
+      matrix:
+        include:
+          - platform: linux/amd64
+            runs-on: ubuntu-latest
+            platform_slug: linux-amd64
+          - platform: linux/arm64
+            runs-on: ubuntu-24.04-arm
+            platform_slug: linux-arm64
+
+    runs-on: ${{ matrix.runs-on }}
+    timeout-minutes: 60
+
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
+
+      - name: Check out the repo
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+
+      - name: Build Docker image for ${{ matrix.platform }}
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          platforms: ${{ matrix.platform }}
+          push: false
+          load: false
+          cache-from: type=gha,scope=${{ matrix.platform_slug }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.platform_slug }}
+          tags: ldr-test:${{ matrix.platform_slug }}-${{ github.sha }}
+          outputs: type=docker,dest=/tmp/image-${{ matrix.platform_slug }}.tar
+
+      - name: Inspect built image
+        run: |
+          # Load and inspect the image
+          docker load < "/tmp/image-${{ matrix.platform_slug }}.tar"
+          docker image inspect ldr-test:${{ matrix.platform_slug }}-${{ github.sha }}
+
+          # Get image size
+          IMAGE_SIZE=$(docker image inspect ldr-test:${{ matrix.platform_slug }}-${{ github.sha }} --format='{{.Size}}' | numfmt --to=iec)
+          echo "Image size for ${{ matrix.platform }}: $IMAGE_SIZE"
+
+      - name: Test image startup
+        run: |
+          docker load < "/tmp/image-${{ matrix.platform_slug }}.tar"
+
+          # Test that the container can start and Python works
+          docker run --rm --platform ${{ matrix.platform }} \
+            ldr-test:${{ matrix.platform_slug }}-${{ github.sha }} \
+            python -c "import sys; print(f'Python {sys.version} on {sys.platform}')"
+
+          # Test that the LDR package is installed
+          docker run --rm --platform ${{ matrix.platform }} \
+            ldr-test:${{ matrix.platform_slug }}-${{ github.sha }} \
+            python -c "import local_deep_research; print('LDR package imported successfully')"
+
+      - name: Test web server startup
+        run: |
+          docker load < "/tmp/image-${{ matrix.platform_slug }}.tar"
+
+          # Start the container in background
+          docker run -d --name ldr-test \
+            --platform ${{ matrix.platform }} \
+            -p 5000:5000 \
+            -e LDR_DB_CONFIG_KDF_ITERATIONS=1000 \
+            -e LDR_TEST_MODE=1 \
+            -e LDR_NEWS_SCHEDULER_ENABLED=false \
+            ldr-test:${{ matrix.platform_slug }}-${{ github.sha }}
+
+          # Wait for server to start
+          TIMEOUT_SECONDS=60
+          echo "Waiting for server to start (timeout: ${TIMEOUT_SECONDS}s)..."
+          for i in $(seq 1 ${TIMEOUT_SECONDS}); do
+            if curl -fsS --connect-timeout 2 --max-time 5 http://localhost:5000/api/v1/health 2>/dev/null; then
+              echo "✅ Server started successfully after ${i} seconds on ${{ matrix.platform }}!"
+              break
+            fi
+            # Show progress every 10 seconds
+            if [ $((i % 10)) -eq 0 ]; then
+              echo "Still waiting... (${i}s elapsed)"
+            fi
+            if [ "$i" -eq "${TIMEOUT_SECONDS}" ]; then
+              echo "❌ Server failed to start within ${TIMEOUT_SECONDS} seconds"
+              docker logs ldr-test
+              exit 1
+            fi
+            sleep 1
+          done
+
+          # Check server response
+          RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:5000)
+          echo "Server response code: $RESPONSE"
+
+          # Clean up
+          docker stop ldr-test
+          docker rm ldr-test
+
+  summary:
+    name: Build Summary
+    needs: test-multiarch-build
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    if: always()
+
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
+
+      - name: Summary
+        env:
+          BUILD_RESULT: ${{ needs.test-multiarch-build.result }}
+        run: |
+          {
+            echo "## Multi-Architecture Build Test Results"
+            echo ""
+          } >> "$GITHUB_STEP_SUMMARY"
+
+          if [ "$BUILD_RESULT" == "success" ]; then
+            {
+              echo "✅ **All platforms built and tested successfully!**"
+              echo ""
+              echo "### Tested Platforms:"
+              echo "- linux/amd64 ✅"
+              echo "- linux/arm64 ✅"
+              echo ""
+              echo "The Docker image is ready for multi-architecture deployment."
+            } >> "$GITHUB_STEP_SUMMARY"
+          else
+            {
+              echo "❌ **Build or tests failed**"
+              echo ""
+              echo "Please check the logs above for details."
+            } >> "$GITHUB_STEP_SUMMARY"
+          fi