feat: add manual production deployment pipeline

wrangler.production.toml

@@ -0,0 +1,37 @@
+name = "baron-qa-gateway-prod"
+main = "src/index.js"
+compatibility_date = "2026-09-18"
+account_id = "81fa2d48964d31dd0da9558f9ce601d1"
+workers_dev = false
+preview_urls = false
+
+# qa.baroncs.co.kr is already attached to this Worker in the Cloudflare dashboard.
+# Keep route/routes absent so deployments preserve that connection without zone writes.
+
+[vars]
+AUTH_REDIRECT_URI = "https://qa.baroncs.co.kr/auth/callback"
+AUTH_POST_LOGOUT_REDIRECT_URI = "https://qa.baroncs.co.kr/"
+AUTH_SCOPE = "openid tenants profile email"
+AUTH_AUTHORIZE_URL = "https://sso.hmac.kr/oidc/oauth2/auth"
+AUTH_TOKEN_URL = "https://sso.hmac.kr/oidc/oauth2/token"
+AUTH_USERINFO_URL = "https://sso.hmac.kr/oidc/userinfo"
+SESSION_COOKIE_NAME = "baron_qa_prod_session_v1"
+OAUTH_COOKIE_NAME = "baron_qa_prod_oauth_v1"
+SESSION_TTL_SECONDS = "3600"
+ABC_SOURCE_NAMESPACE = "EGBIM_QA_PROD"
+ABC_IDEMPOTENCY_CONSUMER = "EGBIM_QA_PROD"
+PUBLIC_EXACT_PATHS = "/,/index.html,/favicon.ico"
+PUBLIC_PREFIXES = "/egbim/,/tova/,/gaia/,/shared/,/assets/,/auth/"
+PROTECTED_PREFIXES = "/egbim/,/tova/,/gaia/"
+PROTECTED_EXACT_PATHS = "/egbim/write.html,/egbim/detail.html"
+INTERNAL_ONLY_PREFIXES = "/protected/"
+
+[[r2_buckets]]
+binding = "QA_BUCKET"
+bucket_name = "baron-qa-write"
+
+[observability]
+enabled = true
+
+[observability.logs]
+enabled = true