* chore: add .worktrees to .gitignore * feat(ci): add Docker smoke test to deploy-staging pipeline Split the monolithic build-and-deploy job into three stages: 1. build: builds and pushes images to GHCR 2. smoke-test: pulls edge images, starts full stack in CI, verifies all services become healthy and pass smoke-test.sh 3. deploy: only runs if smoke test passes, deploys to VPS This catches broken Docker images (missing env vars, broken startup, config issues) before they reach the staging VPS. Previously, broken images would be deployed and only caught by post-deploy health checks, requiring a rollback. Also adds missing barazo-plugins checkout needed by the API Dockerfile. Closes singi-labs/barazo-workspace#33