feat: add JPA production capability

.github/workflows/ci-quality-gates.yml

@@ -70,6 +70,35 @@ jobs:
       - name: Verify the gate matrix against the repository
         run: bash .github/scripts/verify-gate-matrix.sh
 
+  jpa-candidate-evidence:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # actions/setup-java@v4.7.1
+        with:
+          distribution: temurin
+          java-version: "21.0.11+10"
+          cache: gradle
+          cache-dependency-path: |
+            src/**/*.gradle
+            src/**/gradle-wrapper.properties
+            src/**/gradle.lockfile
+      - name: Produce zero-skip JPA candidate manifests
+        working-directory: src
+        run: >-
+          ./gradlew
+          :adapter:outbound:persistence-jpa:verifyJpaCandidateEvidence
+          --no-daemon
+          --stacktrace
+      - name: Retain content-addressed JPA candidate manifests
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # actions/upload-artifact@v7.0.1
+        with:
+          name: jpa-candidate-evidence-${{ github.sha }}
+          path: src/adapter/outbound/persistence-jpa/build/jpa-evidence/manifests
+          if-no-files-found: error
+          retention-days: 14
+
   # Advisory only. Quarantine expiry/drift remains blocking through verifyQuarantineSunset in check.
   quarantine:
     runs-on: ubuntu-latest
@@ -94,6 +123,7 @@ jobs:
       - quality-gates
       - sample-off
       - gate-matrix-lint
+      - jpa-candidate-evidence
     if: always()
     runs-on: ubuntu-latest
     steps:
@@ -102,9 +132,14 @@ jobs:
           QUALITY_RESULT: ${{ needs.quality-gates.result }}
           SAMPLE_OFF_RESULT: ${{ needs.sample-off.result }}
           MATRIX_RESULT: ${{ needs.gate-matrix-lint.result }}
+          JPA_CANDIDATE_RESULT: ${{ needs.jpa-candidate-evidence.result }}
         run: |
           set -euo pipefail
-          for result in "${QUALITY_RESULT}" "${SAMPLE_OFF_RESULT}" "${MATRIX_RESULT}"; do
+          for result in \
+            "${QUALITY_RESULT}" \
+            "${SAMPLE_OFF_RESULT}" \
+            "${MATRIX_RESULT}" \
+            "${JPA_CANDIDATE_RESULT}"; do
             if [[ "${result}" != "success" ]]; then
               echo "::error::release-gate: required job result was ${result}"
               exit 1