Feature: Add enterprise scaling, storage, observability, and restore verification

[JustNZ]

Release

Release 3 — Regulated and air-gapped operations

Goal

Run JustScan reliably as a release-decision service in high-availability and offline environments.

Scope

• Separate horizontally scalable API and scan-worker roles with safe database-backed leasing.
• Add S3-compatible artifact/evidence storage, including on-premises MinIO.
• Add Prometheus metrics and OpenTelemetry traces for APIs, queues, feeds, scans, notifications, and storage.
• Add a backup-and-restore verification command covering PostgreSQL, artifact storage, encryption/signing keys, and active feed metadata.
• Document fully offline install, upgrade, scanner-database, intelligence-feed, and signature-verification procedures.

Acceptance criteria

• Multiple workers cannot process the same scan concurrently.
• API nodes can restart without losing queued work.
• Object-storage failure is reported distinctly from scanner or policy failure.
• Restore verification proves that retained scans, SBOMs, decisions, and evidence are readable.
• A no-network integration environment can complete the documented offline workflow.