test: production ingest E2E test suite with enhanced logging (#55)

## Summary
Production testing of ingest + embedding pipeline with api-gw integration.

## Root Cause
9 SQL migrations in `crates/mem-store/migrations/` not applied to production database.

Missing tables:
- `memory_entity`
- `memory_edge`
- `memory_edge_temporal`
- Vector embeddings tables
- And 15+ more schema objects

Evidence from logs:
```
WARN: Failed to save entity Docker:
      error returned from database: relation "memory_entity" does not exist
```

## Deliverables
- `test_prod_ingest_real.sh` - Full E2E test against K8s + api-gw
- `apply_migrations.sh` - Manual schema migration (backup)
- `collect_prod_logs.sh` - Pod log collection before/after
- `run_production_test.sh` - Test orchestrator
- `tests/integration_ingest_with_gw.rs` - Integration test
- `tests/unit_ingest_logging.rs` - Unit tests for extraction
- Enhanced logging in `ingest_worker.rs` - Per-record event tracking

## Next Steps
1. Trigger "DB Migration" workflow in Forgejo Actions
2. This applies all 9 migrations from `crates/mem-store/migrations/`
3. Pod restart (automatic)
4. Re-run E2E test - should pass completely

**ETA:** ~15 minutes (3-5 min migrations + 2 min restart + verification)

## How to Test Locally
```bash
./test_prod_ingest_real.sh --verbose
```

Requires:
- kubectl access to poimen namespace
- Port-forwarding to memory-service

---------

Co-authored-by: rock <[email protected]>
Reviewed-on: #55
Co-authored-by: poimen <[email protected]>

k8s/tekton/poimen-pipeline.yaml

@@ -0,0 +1,140 @@
+---
+# Tekton Pipeline: Poimen Memory Service CI/CD
+#
+# Orchestrates:
+#   1. integration-test-task: Run integration tests against image
+#   2. (Future) build-task: Build Docker image
+#   3. (Future) promote-task: Promote image to :latest
+#
+# Parameters:
+#   - image: Docker image with SHA to test
+#   - registry-user: Registry credentials
+#   - registry-token: Registry credentials
+
+apiVersion: tekton.dev/v1
+kind: Pipeline
+metadata:
+  name: poimen-ci
+  namespace: poimen
+spec:
+  params:
+  - name: image
+    type: string
+    description: "Docker image SHA to test (e.g., forgejo.riotpiao.com/riotpiao-poimen/poimen-memory:abc123)"
+  
+  - name: registry-user
+    type: string
+    description: "Registry username"
+    default: ""
+  
+  - name: registry-token
+    type: string
+    description: "Registry token/password"
+    default: ""
+
+  workspaces:
+  - name: source
+    description: "Git source repository with migrations"
+
+  tasks:
+  # Task 0: Apply Agent Memory Migrations
+  - name: agent-memory-migration
+    taskRef:
+      name: agent-memory-migration
+    params:
+    - name: migration-version
+      value: "004"
+    - name: database-name
+      value: "memory"
+    workspaces:
+    - name: source
+      workspace: source
+
+  # Task 1: Integration Tests (runs after migration)
+  - name: integration-tests
+    runAfter:
+      - agent-memory-migration
+    taskRef:
+      name: poimen-integration-test
+    params:
+    - name: image
+      value: $(params.image)
+
+  # Task 2: Gate on test results
+  - name: gate-on-tests
+    runAfter:
+      - integration-tests
+    taskSpec:
+      steps:
+      - name: check-results
+        image: alpine:latest
+        script: |
+          #!/bin/sh
+          set -e
+          echo "✓ Integration tests passed, proceeding with promotion"
+
+  # Task 3: Promote image (placeholder - will be implemented)
+  - name: promote-image
+    runAfter:
+      - gate-on-tests
+    taskSpec:
+      params:
+      - name: image
+        type: string
+      - name: registry-user
+        type: string
+      - name: registry-token
+        type: string
+      
+      steps:
+      - name: promote
+        image: docker:latest
+        env:
+        - name: IMAGE
+          value: $(params.image)
+        - name: REGISTRY_USER
+          value: $(params.registry-user)
+        - name: REGISTRY_TOKEN
+          value: $(params.registry-token)
+        script: |
+          #!/bin/sh
+          set -e
+          
+          echo "Promoting image to :latest..."
+          
+          # Extract registry and repo from image
+          # e.g., forgejo.riotpiao.com/riotpiao-poimen/poimen-memory:abc123
+          REGISTRY=$(echo $IMAGE | cut -d/ -f1)
+          REPO=$(echo $IMAGE | cut -d: -f1)
+          SHA=$(echo $IMAGE | cut -d: -f2)
+          
+          echo "Registry: $REGISTRY"
+          echo "Repo: $REPO"
+          echo "SHA: $SHA"
+          echo ""
+          
+          # Login and promote
+          echo "$REGISTRY_TOKEN" | docker login -u "$REGISTRY_USER" --password-stdin "$REGISTRY"
+          docker pull "$IMAGE"
+          docker tag "$IMAGE" "${REPO}:latest"
+          docker push "${REPO}:latest"
+          
+          echo "✓ Promoted to :latest"
+      
+      params:
+      - name: image
+        value: $(params.image)
+      - name: registry-user
+        value: $(params.registry-user)
+      - name: registry-token
+        value: $(params.registry-token)
+
+  finally:
+  - name: cleanup
+    taskSpec:
+      steps:
+      - name: cleanup-tasks
+        image: alpine:latest
+        script: |
+          #!/bin/sh
+          echo "Pipeline execution complete"