Structure: a thin command-line entry point over the application code.
Acceptance tests: scenarios drive the built binary and check exit code, standard output, and
standard error.
Container image: also published as an image, so the tool runs as a Kubernetes job or from
another pipeline without installing its toolchain; the debug image is built on demand only.