Journey repository contract

The UAT repository is a standalone pnpm project. It contains no Kubernetes/Helm/Argo CD manifests and no application implementation.

Required baseline:

journeys/
  smoke/
  regression/
fixtures/
helpers/
playwright.config.ts
package.json
pnpm-lock.yaml
Taskfile.yml
.gitea/workflows/validate.yaml

Rules:

Stable journey IDs appear in test titles and evidence.
UAT_BASE_URL is required; no production-looking default is embedded.
Authentication is loaded from runtime secrets and never persisted in storage-state files committed to Git.
Retries are explicit and low; a retry cannot turn a flaky first failure into an undisclosed pass.
Failure evidence includes trace and screenshot; video is opt-in when data handling permits it.
CI validates types, lint, journey discovery, and a non-network contract test. Environment execution is a separately authorized job.
Taskfile is the human/automation entry point and delegates to package scripts.
The repository README documents local execution, evidence locations, environment variables by name only, and failure classification.