Internal: Add deploy scripts

[KingYes]

✨ PR Description

1. Problem & Context

Adds automated release workflow to handle version bumping, validation, GitHub releases, and WordPress.org deployments. Enables controlled releases from master branch by authorized actors.

2. What Changed (Where)

File	Change
scripts/	4 new validation/version scripts (bash + Node.js)
.github/workflows/release.yml	New 198-line release orchestration workflow
.github/workflows/*.yml	Added workflow_call trigger to PHP linting/testing
package.json	3 new npm scripts for versioning + zip packaging
.build-rsync-exclude	Excludes scripts/ from production build

3. How It Works

Release workflow (triggered manually with patch/minor/major bump): computes next version → validates readme changelog entry exists → bumps package.json → syncs version to plugin files → builds package → validates artifacts → creates git commit/tag → generates changelog from commits → conditionally pushes and deploys to GitHub Releases + WordPress.org SVN. Dry-run mode skips all git/deploy operations.

Helper scripts: next-version.js (semver calculation), sync-version.js (writes version to PHP/readme), validate-readme-changelog.js (ensures changelog section + bullet points exist), validate-build-files.sh (verifies plugin files, version tags, excludes list).

4. Risks

Actor whitelist (KingYes, bainternet, arielk) requires maintenance if team changes. WordPress.org deployment uses hardcoded SVN credentials—ensure SVN_USERNAME/SVN_PASSWORD secrets are properly scoped. Dry-run validation logic could diverge from actual deploy if scripts aren't kept in sync.

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how}

[wiz-9a149474ff]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	2
SAST Findings	1
Software Management Findings	-
Total	1  2

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.