Add GitLab consumer group support

[vigo]

Summary

• Add cmd/gitlabconsumergroup for production Kafka consumer group processing
• Add Dockerfile.gitlab-consumer-group for container builds
• Add GitHub Actions workflows for build and staging deployment
• Update docker-compose.infra.consumerg.yml with gitlab-consumer-group service
• Add rake task run:kafka:gitlab:consumer_group

Test plan

• Build passes
• golangci-lint passes
• Deploy and test with GitLab webhooks

🤖 Generated with Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

This PR adds GitLab consumer group support to enable production Kafka consumer group processing for GitLab webhooks. The implementation follows the existing GitHub consumer group pattern, providing parallel processing capability for GitLab events.

• Adds new gitlabconsumergroup command-line application for consuming GitLab events from Kafka
• Adds Docker build and deployment infrastructure for the new consumer group
• Integrates the consumer group into local development environment

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
cmd/gitlabconsumergroup/main.go	New consumer group application that processes GitLab events from Kafka using consumer groups, mirroring the GitHub consumer group implementation
Dockerfile.gitlab-consumer-group	Multi-stage Docker build configuration for the GitLab consumer group service
.github/workflows/build-push-cauldron-gitlab-group-consumer.yml	Production build and push workflow for the GitLab consumer group Docker image
.github/workflows/stg-cauldron-gitlab-group-consumer.yml	Staging environment build and push workflow for the GitLab consumer group Docker image
docker-compose.infra.consumerg.yml	Adds GitLab consumer group service configuration to local infrastructure setup and includes GitLab HMAC secret environment variable for webhook server
scripts/local/rake/run.rake	Adds rake task for running the GitLab consumer group locally with race detection enabled

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This Dockerfile uses mutable base image tags alpine:latest and busybox:latest, which are susceptible to supply chain attacks because the image contents can change over time without any change on your side. If either upstream image is compromised, future builds or deployments of this consumer group could silently pull a malicious image with access to your runtime environment and secrets. To mitigate this, pin these images to immutable, specific versions or digests (e.g., alpine:3.19 and busybox:1.36 or corresponding SHA digests) and update them intentionally as part of your dependency management process.