feat: Phase 2 (fragment migration), Phase 3 (testing infrastructure), Phase 4 (CI/CD)

Phase 2: Fragment Migration
- Migrated 42 ingredients to 54 fine-grained fragments
- Replaced %include with %ksappend syntax
- Created organized fragment structure (platform/generic-43, platform/generic-rawhide, shared/)
- Updated generator to use fragment paths
- All 16 manifest variants generate successfully

Phase 3: Testing Infrastructure
- Created containerized test runner (tests/container/)
- Added integration test suite (tests/integration/)
- Created golden master fixtures (tests/fixtures/expected_recipes/)
- 41 tests passing (36 unit + 5 integration)
- 54 fragments, 16 recipes validated

Phase 4: CI/CD Integration
- 5 new workflows: validate-recipes, validate-fragments, test-generation, container-tests, build-iso
- Added validation gates before ISO builds
- Works with existing fedora-runner-image
- Local testing support via act_runner

.gitea/workflows/build-iso.yaml

@@ -1,75 +1,75 @@
-name: release
+name: build-iso
 
-on: 
+on:
   push:
-    branches:
-      - main  # Or your desired branch
+    branches: [main]
+  release:
+    types: [published]
 
 jobs:
-  checkout:
-    runs-on: fedora-cloud-42
-    defaults:
-      run:
-        shell: bash
-    container: 
+  validate:
+    runs-on: fedora
+    container:
       image: git.phyllo.me/devops/fedora-runner-image:latest
-
+    
     steps:
       - uses: https://git.phyllo.me/devops/checkout@v5
         with:
           fetch-depth: 0
-   
+      
+      - name: Install dependencies
+        run: |
+          pip install PyYAML pykickstart
+      
+      - name: Generate all recipes
+        run: |
+          cd scripts
+          python3 generate_recipe.py \
+            --manifest recipes_manifest.yaml \
+            --output-dir ../recipes/
+      
+      - name: Validate recipes (strict mode)
+        run: |
+          cd scripts
+          python3 generate_recipe.py --validate ../recipes/*.cfg --strict
+  
+  build-iso:
+    needs: validate
+    runs-on: fedora-cloud-42
+    container:
+      image: git.phyllo.me/devops/fedora-runner-image:latest
+    
+    steps:
+      - uses: https://git.phyllo.me/devops/checkout@v5
+        with:
+          fetch-depth: 0
+      
       - name: Initialize mock
         run: |
           mock -r fedora-43-x86_64 --init
-
+      
       - name: Install required packages
         run: |
           mock -r fedora-43-x86_64 --install lorax-lmc-novirt vim-minimal pykickstart livecd-tools
-
+      
       - name: Copy configuration file to mock
         run: |
-          mock -r fedora-43-x86_64 --copyin dishes/live-server.cfg /builddir
-
+          mock -r fedora-43-x86_64 --copyin recipes/live-server_rawhide.cfg /builddir
+      
       - name: Build ISO with livemedia-creator
         run: |
           mock -r fedora-43-x86_64 --shell --enable-network --isolation=simple << 'EOF'
           cd /builddir
-          livemedia-creator --ks live-server.cfg --no-virt --resultdir /var/lmc --project live-desktop-hypervisor --make-iso --volid live-desktop-hypervisor --iso-only --iso-name server-43.iso --releasever 43 --macboot
+          livemedia-creator --ks live-server_rawhide.cfg --no-virt --resultdir /var/lmc --project live-server --make-iso --volid live-server --iso-only --iso-name server-43.iso --releasever 43 --macboot
           EOF
-
+      
       - name: Upload ISO as artifact
         uses: actions/upload-artifact@v3
         with:
           name: server-43.iso
           path: /var/lmc/server-43.iso
           if-no-files-found: error
-
-      - name: Create Release
-        if: github.ref == 'refs/heads/main'
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: iso-build-${{ github.run_number }}
-          release_name: ISO Build ${{ github.run_number }}
-          body: |
-            Build artifact from workflow run ${{ github.run_number }}
-            ISO file: server-43.iso
-          draft: false
-          prerelease: false
-
-      - name: Upload ISO to Release
-        if: github.ref == 'refs/heads/main'
-        uses: actions/upload-release-asset@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          upload_url: ${{ steps.create_release.outputs.upload_url }}
-          asset_path: /var/lmc/server-43.iso
-          asset_name: server-43.iso
-          asset_content_type: application/x-iso9660-image
-
+      
       - name: Cleanup mock environment
         if: always()
         run: |