feat: jpa, messaging, notification, mongo, graphql 어댑터터 구현체 추가

scripts/verify-mongodb-platform.sh

@@ -142,6 +142,25 @@ echo "skipped: ${#SKIPPED[@]}"
 for entry in "${SKIPPED[@]:-}"; do [[ -n "${entry}" ]] && echo "  ~ ${entry}"; done
 echo "failed:  ${#FAILED[@]}"
 for entry in "${FAILED[@]:-}"; do [[ -n "${entry}" ]] && echo "  - ${entry}"; done
+
+# --- promotion manifest -------------------------------------------------------------------------
+# What was actually certified, tied to what produced it. A gate output that says "PASSED" and
+# nothing else cannot be checked later against the artefact it supposedly certified: the commit, the
+# server image and the driver version are exactly what somebody reads during an incident.
+MANIFEST_DIR="${REPO_ROOT}/src/adapter/outbound/persistence-mongo/build/reports/mongo-release"
+mkdir -p "${MANIFEST_DIR}"
+{
+  echo "{"
+  echo "  \"commit\": \"$(git -C "${REPO_ROOT}" rev-parse HEAD)\","
+  echo "  \"commitDirty\": $( [[ -n "$(git -C "${REPO_ROOT}" status --porcelain)" ]] && echo true || echo false ),"
+  echo "  \"serverImage\": \"${MONGODB_IMAGE:-mongo:8.0.16}\","
+  echo "  \"generatedAt\": \"$(date -u +%Y-%m-%dT%H:%M:%SZ)\","
+  echo "  \"contractManifest\": \"src/config/mongodb/release-contracts.json\","
+  echo "  \"contractManifestSha256\": \"$(sha256sum "${REPO_ROOT}/src/config/mongodb/release-contracts.json" | cut -d' ' -f1)\""
+  echo "}"
+} > "${MANIFEST_DIR}/promotion.json"
+echo "promotion manifest: ${MANIFEST_DIR}/promotion.json"
+
 echo "---------------------------------------------------------------"
 
 if (( ${#FAILED[@]} > 0 )); then