release engineering

Turn ML notebooks into shippable, reproducible releases with a Bash-first workflow: lock environments and seeds, version data with Git LFS, build deterministic artifacts via Makefiles, containerize models with rich OCI labels using Podman/skopeo, cryptographically sign and verify with cosign, and automate CI quality gates and promotion—yielding compliant, auditable models that ship fast on Linux.