- Add Trivy fs scan for CRITICAL/HIGH severity vulnerabilities
- Upload results as SARIF to GitHub/Forgejo Security tab
- Add to both GitHub Actions and Forgejo workflows
- Remove Convex from docker-compose (runs separately)
- Add .forgejo/workflows/ci.yml with auto-deploy to Coolify
- Update DEVELOPMENT.md with dev/prod architecture diagram
- Rename branch from develop to dev in all workflows