ci: validate issue 416 restore redaction hardening

.github/workflows/issue-416-restore-redaction-validation.yml

@@ -0,0 +1,50 @@
+name: Issue 416 Restore Redaction Validation
+
+on:
+  push:
+    branches:
+      - feat/issue-416-backup-destinations
+    paths:
+      - .github/workflows/issue-416-restore-redaction-validation.yml
+      - apps/dokploy/__test__/backups/redact-credentials.test.ts
+      - packages/server/src/utils/backups/redact.ts
+      - packages/server/src/utils/restore/postgres.ts
+      - packages/server/src/utils/restore/mysql.ts
+      - packages/server/src/utils/restore/mariadb.ts
+      - packages/server/src/utils/restore/mongo.ts
+      - packages/server/src/utils/restore/libsql.ts
+      - packages/server/src/utils/restore/compose.ts
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v5
+        with:
+          version: 10.22.0
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24.4.0
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - name: Focused credential-redaction tests
+        run: pnpm --filter=dokploy run test -- --run __test__/backups/redact-credentials.test.ts
+      - name: Workspace typecheck
+        run: pnpm typecheck
+      - name: Biome check hardened files
+        run: >-
+          pnpm exec biome check
+          apps/dokploy/__test__/backups/redact-credentials.test.ts
+          packages/server/src/utils/backups/redact.ts
+          packages/server/src/utils/restore/postgres.ts
+          packages/server/src/utils/restore/mysql.ts
+          packages/server/src/utils/restore/mariadb.ts
+          packages/server/src/utils/restore/mongo.ts
+          packages/server/src/utils/restore/libsql.ts
+          packages/server/src/utils/restore/compose.ts
+      - name: Server build
+        run: pnpm --filter=dokploy run build-server