[AZ-219] Scaffold onboard runtime project

Add the initial source, test, infrastructure, CI, configuration, and evidence-path scaffold so dependent implementation tasks have stable package and runtime boundaries.

Co-authored-by: Cursor <cursoragent@cursor.com>

deployment/compose/README.md

@@ -0,0 +1,4 @@
+# Compose Configuration
+
+Runtime compose files live at the repository root so local and CI commands can
+use Docker defaults without extra path arguments.

deployment/docker/Dockerfile.replay

@@ -0,0 +1,19 @@
+FROM python:3.12-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+RUN groupadd --system gpsd && useradd --system --gid gpsd --home-dir /app gpsd
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+COPY tests ./tests
+
+RUN python -m pip install --no-cache-dir --upgrade pip \
+    && python -m pip install --no-cache-dir ".[dev]"
+
+USER gpsd
+
+CMD ["python", "-m", "pytest"]

deployment/docker/Dockerfile.runtime

@@ -0,0 +1,18 @@
+FROM python:3.12-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+RUN groupadd --system gpsd && useradd --system --gid gpsd --home-dir /app gpsd
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+
+RUN python -m pip install --no-cache-dir --upgrade pip \
+    && python -m pip install --no-cache-dir .
+
+USER gpsd
+
+CMD ["python", "-c", "import shared.contracts; print('gps-denied runtime scaffold ready')"]

deployment/jetson/README.md

@@ -0,0 +1,4 @@
+# Jetson Deployment Notes
+
+Reserved for Jetson provisioning, thermal/resource evidence, and hardware-runner
+qualification procedures.

deployment/scripts/collect_evidence.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+mkdir -p e2e/reports data/test-results
+printf 'Evidence collection placeholder. Wire runtime reports in deploy phase.\n'