- add eventrt-certs-secret.sh helper script for creating cert secret
- update configmap: use K8s service DNS names for mongodb and jaeger
- switch deploy_env to development and image to local eventrt:v1
- add explicit command entrypoint to deployment manifest
- update mongodb credentials to match local dev setup
- add three-stage build table (builder/certs/runtime) to section 3.1
- add --build-arg USER_ID option for custom non-root UID
- add method 2: load pre-built local image (e.g. eventrt:v1) into Minikube
- add smoke test subsection 3.1.1 with size/inspect/run checks
- bump base image from golang:1.25-alpine to golang:1.26-alpine
- remove bundled config.example.yaml from image (config should be mounted at runtime)
- add multi-stage scratch-based Dockerfile with non-root user and mTLS cert support
- add K8s Deployment, Service, ConfigMap, and Secret manifests with security hardening
- bind MONGODB_PASSWORD and SERVICE_SECRET_KEY from environment variables via viper
- restructure deploy/ directory and remove unused modelrt.cnf
- bump Go version to 1.26.3 and add event-flow-analysis doc
- publish persisted alarm events to UI consumers via RabbitMQ fanout exchange - add GET /events/:event_uuid handler to query a single event from MongoDB
- add PATCH confirm/close handlers with atomic FindOneAndUpdate status transitions - register /events routes in main.go
- migrate logger to read traceID/spanID from OTel span context instead of ctx string keys
- extract upstream W3C trace context from AMQP headers in processAlarmEventMessage to chain spans across modelRT→eventRT
- add per-message span in processAlarmEventMessage for end-to-end trace visibility