feat(billing): implement tenant subscription entitlements system (milestones 0-6)

.gitea/workflows/s3-provision.yml

@@ -0,0 +1,45 @@
+name: s3-provision
+
+on:
+  workflow_dispatch:
+
+jobs:
+  provision-docs-bucket:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install AWS CLI
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y awscli
+
+      - name: Validate required secrets
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }}
+          S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
+          S3_REGION: ${{ secrets.S3_REGION }}
+          S3_BUCKET_DOCS: ${{ secrets.S3_BUCKET_DOCS }}
+        run: |
+          test -n "$AWS_ACCESS_KEY_ID"
+          test -n "$AWS_SECRET_ACCESS_KEY"
+          test -n "$S3_ENDPOINT"
+          test -n "$S3_REGION"
+          test -n "$S3_BUCKET_DOCS"
+
+      - name: Provision docs bucket (idempotent)
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }}
+          S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
+          S3_REGION: ${{ secrets.S3_REGION }}
+          S3_BUCKET_DOCS: ${{ secrets.S3_BUCKET_DOCS }}
+          S3_ENABLE_VERSIONING: ${{ secrets.S3_ENABLE_VERSIONING }}
+          S3_LIFECYCLE_JSON: docs/usage/s3_lifecycle_docs_default.json
+          S3_PREFIX_DOCS: docs/
+        run: |
+          sh docker/scripts/s3_create_docs_bucket.sh
+          sh docker/scripts/s3_verify_docs.sh
+