PostgreSQL SSL Security & Deployment Improvements

Security Improvements

• Upgrades PostgreSQL connections to use full SSL certificate verification (sslmode=verify-full), ensuring the database server's identity is validated on every connection and protecting against potential man-in-the-middle attacks.
• Configures the AWS RDS Certificate Authority as the SSL root certificate via Helm chart values, enabling verified, encrypted database connections without embedding the CA bundle in the service image.

Developer Experience

• Adds a CI check that fails pull requests when the committed gen/ directory is out of sync with the design/ source, preventing silently-regenerated code from bypassing review.

Infrastructure

• Automates deployment notifications to ArgoCD following tagged releases, streamlining the release pipeline and reducing time between a release tag and deployment propagation to target environments.