- add mongodb StatefulSet, Service, PVC, and Secret manifests for Minikube
- restructure deploy.md MongoDB section into Docker (1.1) and K8s (1.2) paths
- add connection verification, cleanup, and teardown sections to deploy guide
- document local go build/run workflow (section 5.2-5.4)
- reference eventrt-certs-secret.sh helper and Pod readiness waits
- fix MongoDB password env var name in docs (INITDB_ROOT_PASSWORD)
- set imagePullPolicy IfNotPresent on rabbitmq deployment for local images
- add three-stage build table (builder/certs/runtime) to section 3.1
- add --build-arg USER_ID option for custom non-root UID
- add method 2: load pre-built local image (e.g. eventrt:v1) into Minikube
- add smoke test subsection 3.1.1 with size/inspect/run checks
- bump base image from golang:1.25-alpine to golang:1.26-alpine
- remove bundled config.example.yaml from image (config should be mounted at runtime)
- add multi-stage scratch-based Dockerfile with non-root user and mTLS cert support
- add K8s Deployment, Service, ConfigMap, and Secret manifests with security hardening
- bind MONGODB_PASSWORD and SERVICE_SECRET_KEY from environment variables via viper
- restructure deploy/ directory and remove unused modelrt.cnf
- bump Go version to 1.26.3 and add event-flow-analysis doc