[AZ-219] Scaffold onboard runtime project

Add the initial source, test, infrastructure, CI, configuration, and evidence-path scaffold so dependent implementation tasks have stable package and runtime boundaries.

Co-authored-by: Cursor <cursoragent@cursor.com>

deployment/docker/Dockerfile.replay

@@ -0,0 +1,19 @@
+FROM python:3.12-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+RUN groupadd --system gpsd && useradd --system --gid gpsd --home-dir /app gpsd
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+COPY tests ./tests
+
+RUN python -m pip install --no-cache-dir --upgrade pip \
+    && python -m pip install --no-cache-dir ".[dev]"
+
+USER gpsd
+
+CMD ["python", "-m", "pytest"]

deployment/docker/Dockerfile.runtime

@@ -0,0 +1,18 @@
+FROM python:3.12-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+RUN groupadd --system gpsd && useradd --system --gid gpsd --home-dir /app gpsd
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+
+RUN python -m pip install --no-cache-dir --upgrade pip \
+    && python -m pip install --no-cache-dir .
+
+USER gpsd
+
+CMD ["python", "-c", "import shared.contracts; print('gps-denied runtime scaffold ready')"]