Migrate CI from hand-crafted .taskcluster.yml to taskgraph

[JohanLorenzo]

Summary

• Replaces the hand-crafted v1 `.taskcluster.yml` with a taskgraph-based setup
• Adds in-tree Docker images (`python`, `taskboot`, `node`) for all CI tasks
• All tasks consolidated to firefox-ci (previously split between firefox-ci and community-tc)
• Implements lint, test, frontend, build, deploy, hook, and release kinds

Dependencies

Requires mozilla-releng/fxci-config#882 to add `github-taskgraph: true` and the `code-analysis-{1,3}/decision` worker pool for the `code-review` project.

Merge order

1. Merge Enable github-taskgraph for code-review project mozilla-releng/fxci-config#882 (auto-deploys to production)
2. Verify this PR on production
3. Merge this PR

Verification

All commits verified on staging (https://stage.taskcluster.nonprod.webservices.mozgcp.net) via JohanLorenzo/code-review fork (PR: JohanLorenzo#1).

a4dcd2f — Scaffold taskgraph with config, docker images, and parameters

• docker-image-python ✅
• docker-image-taskboot ✅
• docker-image-node ✅

4bb8dc3 — Add lint kind

• lint-pre-commit ✅

  + pre-commit run -a --show-diff-on-failure
  Result: SUCCEEDED
  

2fcecea — Add test kind

• test-bot ✅

  136 passed, 173 warnings in 10.91s
  

• test-backend ✅

  Ran 38 tests in 0.783s
  

• test-integration ✅

  2 passed, 1 warning in 0.46s
  

5e53138 — Add frontend kind

• frontend-build ✅

  webpack 5.105.0 compiled successfully in 13629 ms
  + cp -r build /builds/worker/artifacts/frontend
  

26f1921 — Add build kind

• build-bot ✅

  INFO:taskboot.docker:Saving image with tags .../mozilla/code-review:4a848736..., .../mozilla/code-review:dev to /builds/worker/artifacts/bot.tar
  

• build-backend ✅

  INFO:taskboot.docker:Saving image with tags .../mozilla/code-review:4a848736..., .../mozilla/code-review:dev to /builds/worker/artifacts/backend.tar
  

• build-integration ✅

  INFO:taskboot.docker:Saving image with tags .../mozilla/code-review:integration-4a848736..., .../mozilla/code-review:integration-dev to /builds/worker/artifacts/integration.tar
  

89e590d — Add deploy kind

Verified e2e on testing branch:

• deploy-frontend ✅

  + taskboot deploy-s3 --artifact-folder public/frontend --bucket relman-testing-code-review-testing-static-website
  INFO:root:Loading Taskcluster secret project/relman/code-review/deploy-testing
  Result: SUCCEEDED
  

• deploy-backend ✅

  + taskboot deploy-heroku --heroku-app code-review-backend-testing web:public/code-review-backend.tar.zst
  INFO:taskboot.push:Deploying update for dyno types: ['web']
  

• deploy-integration ✅

  INFO:taskboot.docker:Push successful
  

c88be2f — Add hook kind

Verified e2e on testing branch:

• hook-integration ✅

  + taskboot --target /builds/worker/checkouts/vcs build-hook integration/taskcluster-hook.json project-relman code-review-integration-testing
  INFO:taskboot.build:Hook project-relman/code-review-integration-testing was successfully updated
  

811bb94 — Add release kind

Verified via direct staging submission (fork + test secret):

• release-github

  INFO:root:Loading Taskcluster secret project/relman/code-review/release-test
  INFO:taskboot.github:Loaded Github repository JohanLorenzo/code-review #1184247922
  github.GithubException.UnknownObjectException: 404 (tag v1.0.0 does not exist — expected, fake tag used for test)
  

  Secret access ✅, GitHub auth ✅, command reached tag lookup ✅