🚀 Complete automation pipeline with SSL, testing, and deployment

✨ Features:
- Full SSL setup with Let's Encrypt for all environments
- Automated CI/CD pipeline with GitHub Actions
- Comprehensive smoke testing workflow
- Auto-deploy to dev on main branch push
- Manual staging/production deployments with confirmation
- Istio + nginx SSL termination architecture

🔧 Infrastructure:
- Migrated from Kourier to Istio for Knative ingress
- nginx handles SSL termination and public traffic
- Istio manages internal Knative service routing
- Scale-to-zero configuration for all environments

🧪 Testing:
- SSL certificate validation and expiry checks
- Domain accessibility and content validation
- Performance testing and redirect behavior validation
- Automated smoke tests on every deployment

🌐 Domains:
- Dev: https://2048-dev.wa.darknex.us
- Staging: https://2048-staging.wa.darknex.us
- Production: https://2048.wa.darknex.us

📦 Deployment:
- Uses latest GHCR images with imagePullPolicy: Always
- Automated secret management across namespaces
- Environment-specific Knative service configurations
- Clean manifest structure with proper labeling

manifests/dev/domain-mapping.yml

@@ -1,15 +0,0 @@
-apiVersion: serving.knative.dev/v1beta1
-kind: DomainMapping
-metadata:
-  name: 2048-dev.wa.darknex.us
-  namespace: game-2048-dev
-  labels:
-    app: game-2048
-    environment: development
-spec:
-  ref:
-    name: game-2048-dev
-    kind: Service
-    apiVersion: serving.knative.dev/v1
-  tls:
-    secretName: game-2048-dev-cert-secret

manifests/dev/service.yml

@@ -9,45 +9,18 @@ metadata:
 spec:
   template:
     metadata:
-      labels:
-        app: game-2048
-        environment: development
       annotations:
-        # Scale to zero configuration
         autoscaling.knative.dev/minScale: "0"
         autoscaling.knative.dev/maxScale: "10"
-        autoscaling.knative.dev/scaleDownDelay: "30s"
         autoscaling.knative.dev/target: "100"
     spec:
       containers:
-      - name: game-2048
-        image: ghcr.io/ghndrx/k8s-game-2048:latest
+      - image: ghcr.io/ghndrx/k8s-game-2048:latest
         imagePullPolicy: Always
         ports:
-        - containerPort: 8080
-          protocol: TCP
+        - containerPort: 80
         env:
         - name: ENVIRONMENT
           value: "development"
-        resources:
-          requests:
-            cpu: 100m
-            memory: 128Mi
-          limits:
-            cpu: 500m
-            memory: 256Mi
-        readinessProbe:
-          httpGet:
-            path: /
-            port: 8080
-          initialDelaySeconds: 5
-          periodSeconds: 10
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: 8080
-          initialDelaySeconds: 15
-          periodSeconds: 20
-  traffic:
-  - percent: 100
-    latestRevision: true
+      imagePullSecrets:
+      - name: ghcr-secret