refs #82 #83 #84 #85 #86 #87 #88 #89 #90 #91 #92 - Replace all docker:cli build/tag/push with woodpeckerci/plugin-docker-buildx - Replace all aquasec/trivy shell commands with woodpeckerci/plugin-trivy - Add fhirworx/api image to deploy, infra-ci, and rebuild-all pipelines - Add docs trivy scan + S3 upload (was missing) - Add coverage badge S3 upload and git-push auto-commit - Add PR comment plugin for CI feedback - Create release.yml for tag-triggered Gitea releases - Wire diag failure reporter into all 5 pipelines