iObj: initial service — FastAPI + TinyDB memory object store

- Month-sharded TinyDB storage with search/filter (type, project, tag, date range, free-text)
- FastAPI app with bearer-token auth, CRUD + search endpoints
- 27 passing pytest tests (storage + API)
- Dockerfile + Nomad job spec + Gitea Actions deploy workflow (mirrors devops-mcp pattern)

.gitea/workflows/deploy.yml

@@ -0,0 +1,78 @@
+name: Build and Deploy iObj
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+env:
+  SERVICE_NAME: iobj
+
+jobs:
+  build-image:
+    runs-on: debian-host
+
+    env:
+      PATH: /usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/bin:/snap/bin
+      DOCKER_HOST: unix:///var/run/docker.sock
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: System info
+      run: |
+        uname -a
+        whoami
+
+    - name: Log in to Docker Registry
+      run: |
+        echo "${{ secrets.HARBOR_ROBOT_TOKEN }}" | docker login registry.i80.dk -u "robot\$gitserver" --password-stdin
+
+    - name: Build Docker image
+      run: |
+        SHA=$(git rev-parse --short HEAD)
+        docker build \
+          -t registry.i80.dk/gitea/iobj:latest \
+          -t registry.i80.dk/gitea/iobj:$SHA .
+
+    - name: Push Docker image
+      run: |
+        SHA=$(git rev-parse --short HEAD)
+        docker push registry.i80.dk/gitea/iobj:latest
+        docker push registry.i80.dk/gitea/iobj:$SHA
+      env:
+        PATH: /usr/bin:/usr/local/bin:/bin:/sbin:/usr/sbin
+
+    - name: Deploy to Nomad
+      run: |
+        SHA=$(git rev-parse --short HEAD)
+        nomad job validate -var="image_tag=$SHA" ${SERVICE_NAME}.nomad
+        # Rolling deploy: canary replaces the existing job, keeping old alloc alive
+        # until the new one passes its health check (zero-downtime)
+        nomad job run -var="image_tag=$SHA" ${SERVICE_NAME}.nomad
+      env:
+        NOMAD_ADDR: "https://nomad.i80.dk:4646"
+
+    - name: Wait for deployment
+      run: |
+        echo "Checking deployment status..."
+        nomad job status ${SERVICE_NAME}
+
+        echo "=== Allocation Details ==="
+        nomad job allocs ${SERVICE_NAME}
+
+        echo "=== Getting logs from allocations ==="
+        for alloc in $(nomad job allocs ${SERVICE_NAME} -short | tail -n +2 | awk '{print $1}'); do
+          echo "Logs for allocation $alloc:"
+          nomad alloc logs $alloc || echo "No logs available for $alloc"
+        done
+      env:
+        NOMAD_ADDR: "https://nomad.i80.dk:4646"
+
+    - name: Notify deployment status
+      run: |
+        echo "Deployment completed!"
+        echo "iObj service should be available at: https://${SERVICE_NAME}.i80.dk"
+        echo "Health check endpoint: https://${SERVICE_NAME}.i80.dk/health"