[AZ-263] Bootstrap: repo skeleton + Docker + CI + Alembic + Tier-1 tests

Implements the AZ-263 / E-BOOT initial structure task:

- Python src/-layout package `gps_denied_onboard/` with per-component
  interface stubs (14 components), type-only DTOs under `_types/`,
  shared helpers under `helpers/` (R14 LightGlue ownership), structured
  JSON logging, runtime composition root with env-var fail-fast gate,
  healthcheck module shared by Docker and CI smoke.
- CMake top-level + `cmake/{build_options,dependencies,strategies}.cmake`
  with the BUILD_* per-binary flags (ADR-002) and pinned external git
  refs for OKVIS2 / VINS-Mono / GTSAM / FAISS / OpenCV >=4.12.0.
- Three Dockerfiles (companion-tier1, operator-tooling,
  mock-suite-sat-service) + two compose files (dev + Tier-1 test).
- Four GitHub Actions workflows: ci.yml (lint/unit/integration/dual
  binary build/SBOM diff/security), ci-tier2.yml (self-hosted Jetson
  AC-bound NFTs), release.yml, cve-rescan.yml.
- Two CI gate scripts: `ci/sbom_diff.py` (deployment SBOM subset +
  R02 exclusion), `ci/opencv_pin_gate.py` (>=4.12.0 enforcement,
  D-CROSS-CVE-1).
- Alembic-driven Postgres 16 initial migration `0001_initial.py`
  mirroring satellite-provider tiles + flights + sector_classifications
  + manifests + engine_cache_entries (data_model.md s 2).
- Tier-1 test scaffolding: 95 passing unit tests covering every AC,
  per-component smoke tests, structured logging JSON output check,
  env-var gate check, healthcheck import check. Two CI-gated tests
  (cmake configure, actionlint) skip locally with explicit reasons.
- Batch report + code review report under `_docs/03_implementation/`.

Verdict: PASS_WITH_WARNINGS (two Low findings, both informational).
Co-authored-by: Cursor <cursoragent@cursor.com>

tests/fixtures/ardupilot_sitl/README.md

@@ -0,0 +1,4 @@
+# ArduPilot SITL fixtures
+
+Bootstrap placeholder. Concrete SITL compose / launch scripts land with AZ-393
+(C8 ArduPilot outbound) and AZ-416 (FT-P-09-AP).

tests/fixtures/calibration/adti26.json

@@ -0,0 +1,17 @@
+{
+  "camera_id": "adti26",
+  "intrinsics_3x3": [
+    [1234.5, 0.0,    640.0],
+    [0.0,    1234.5, 360.0],
+    [0.0,    0.0,    1.0]
+  ],
+  "distortion": [0.0, 0.0, 0.0, 0.0, 0.0],
+  "body_to_camera_se3": {
+    "rotation_xyzw": [0.0, 0.0, 0.0, 1.0],
+    "translation_xyz_m": [0.0, 0.0, 0.0]
+  },
+  "acquisition_method": "calibration_target_aligned",
+  "metadata": {
+    "note": "Test fixture; replaced in production by adti20.json."
+  }
+}

tests/fixtures/mavlink_signing/dev_key

@@ -0,0 +1 @@
+deadbeefcafef00ddeadbeefcafef00d

tests/fixtures/mock-suite-sat-service/README.md

@@ -0,0 +1,6 @@
+# mock-suite-sat-service (test fixture)
+
+Minimal FastAPI stand-in for the parent-suite `satellite-provider`. Bootstrap
+exposes only `GET /healthz`. The full D-PROJ-2 ingest contract is implemented
+once the parent-suite design (`_docs/_process_leftovers/2026-05-09_satellite-provider-design-tasks.md`)
+lands.

tests/fixtures/mock-suite-sat-service/main.py

@@ -0,0 +1,16 @@
+"""Minimal mock of the parent-suite `satellite-provider`.
+
+Bootstrap (AZ-263) placeholder — exposes only `GET /healthz`. The full D-PROJ-2
+ingest contract is implemented once the parent-suite design lands.
+"""
+
+from __future__ import annotations
+
+from fastapi import FastAPI
+
+app = FastAPI(title="mock-suite-sat-service", version="0.1.0")
+
+
+@app.get("/healthz")
+def healthz() -> dict[str, str]:
+    return {"status": "ok"}