feat: CI/CD pipeline -- build-service, manifests, deploy, renovate (matches liquidity pattern)
- manifests/{main,test,dev}.yml: 13 services across zoo-{mainnet,testnet,devnet}
- build-service.yml: reusable lint+test+build+push to GHCR, notify universe
- ci.yml: layer 2 orchestrator -- deploy-single, deploy-all, E2E
- scripts/ci/update-manifest.sh: atomic manifest field update
- scripts/ci/deploy-all.sh: kustomize-based deploy to DOKS
- renovate.json: auto-merge minor/patch for zoo-labs + hanzoai images
All GHCR (ghcr.io/zoo-labs/*), all DOKS (do-sfo3-zoo-k8s), no GAR/GKE.