feat: production rework of package, services, CI, and packaging

Python package. Removes the defunct VesselFinder and MarineTraffic web
scrapers (anti-bot walls and paywalls broke them; issue #81), keeping the
local metadata database read path used by network_graph and examples.
Fixes the latitude/longitude copy-paste bug in raster lookups, the
bathymetry segment-boundary indexing bugs, the meaningless coordinate
range assert, and local-timezone epoch parsing. Positional interpolation
now routes lat/lon through projected space instead of interpolating raw
degrees. Domain accepts MultiPolygon zones and gains
Domain.from_geodataframe with CRS normalization (issue #133). visualize()
accepts host and port parameters (issue #97) and is exported from the
package root. SQL built from user-facing values is now bound or coerced,
month identifiers are validated, and Postgres aggregation matches SQLite
semantics. Version is read from package metadata, dropping the toml
dependency. Dead modules, ignored parameters, commented-out blocks, and
duplicate docstrings are gone.

Rust workspace. All six pyfunctions now catch panics at the FFI boundary
and raise Python exceptions, with real errors for empty input, unknown
file types, and out-of-range timestamps. MMSI parsing no longer panics on
malformed CSV rows and short rows are tolerated. The receiver flushes
both message buffers on a timer and on shutdown so a crash cannot drop
buffered data (issue #117). database_server is ported from removed
nightly generator features to stable Rust, de-panicked on the request
path, and unified on tungstenite 0.21. The WebAssembly client builds
again, dead experiments and unused dependencies are removed, and wildcard
dependency versions are pinned.

Tests and CI. The suite runs green end to end (60 passed locally,
PostgreSQL and TimescaleDB paths included). Multi-gigabyte raster
download tests are opt-in via AISDB_RASTER_TESTS. The pipeline gains
rust fmt/clippy/test and database_server jobs, a uv wheel-install smoke
test guarding against the malformed-wheel regression, a docs build, and
secret fallbacks; 32-bit wheel targets are dropped and deprecated actions
replaced. Dependabot, CODEOWNERS, and a pull request template are added.
Dependency bumps from PRs #114 and #160 are applied across all lockfiles.

Packaging and docs. pyproject declares the real dependency set, Python
3.10 as the floor, a pinned maturin range, and consolidated pytest and
coverage configuration. Raster archives are now served from this
repository release assets instead of a university server. README,
CONTRIBUTING, and SECURITY are rewritten to current practice.

Author: gabrielspadon

.coveragerc

@@ -0,0 +1 @@
+* @gabrielspadon

.github/CODEOWNERS

@@ -0,0 +1,21 @@
+# Pull Request
+
+## Summary
+
+Describe what this pull request does and why it is needed.
+
+## Changes
+
+- List the main changes introduced by this pull request.
+
+## Testing
+
+Describe how the changes were tested (unit tests, integration tests, manual verification).
+
+## Checklist
+
+- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and followed the quality gates described there.
+- [ ] Rust changes pass `cargo fmt --check`, `cargo clippy`, and `cargo test` in the affected crates.
+- [ ] Python changes pass `pytest ./aisdb/tests/`.
+- [ ] All SQL statements are parameterized.
+- [ ] Documentation was updated where relevant.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,44 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    directories:
+      - "/"
+      - "/aisdb_lib"
+      - "/receiver"
+      - "/client_webassembly"
+      - "/database_server"
+    schedule:
+      interval: "weekly"
+    groups:
+      cargo-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "npm"
+    directories:
+      - "/aisdb_web"
+      - "/docs"
+    schedule:
+      interval: "weekly"
+    groups:
+      npm-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      python-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions-dependencies:
+        patterns:
+          - "*"

.github/dependabot.yml

@@ -16,45 +16,36 @@ jobs:
       contents: read
       pages: write
       id-token: write
-    strategy:
-      matrix:
-        target: [ x86_64 ]
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v4
-      
-      - uses: actions/setup-python@v5
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
         with:
           python-version: '3.10'
 
-      - name: Install dependencies
-        run: |
-          if command -v yum &> /dev/null; then
-                sudo yum update -y && sudo yum install -y perl-core openssl openssl-devel pkgconfig libatomic clang gcc-multilib 
-                # If we're running on i686 we need to symlink libatomic
-                # in order to build openssl with -latomic flag.
-                if [[ ! -d "/usr/lib64" ]]; then
-                    sudo ln -s /usr/lib/libatomic.so.1 /usr/lib/libatomic.so
-                fi
-                
-                echo "finished yum install"
-            else
-                # If we're running on debian-based system.
-                sudo apt update -y && sudo apt-get install -y libssl-dev openssl pkg-config zlib1g-dev clang gcc-multilib  
-                
-                echo "finished apt install"
-            fi
-      
-      - name: Install Rust Target for wasm
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install system dependencies
         run: |
-          rustup target add wasm32-unknown-unknown
-            
-      - name: install wasm-pack
+          sudo apt-get update -y
+          sudo apt-get install -y libssl-dev openssl pkg-config zlib1g-dev clang
+
+      - name: Add wasm target
+        run: rustup target add wasm32-unknown-unknown
+
+      - name: Install wasm-pack
         run: |
-          cargo install --locked wasm-pack --verbose
-          cargo install --locked wasm-bindgen-cli --verbose
-          cargo install --locked wasm-opt --verbose
+          cargo install --locked wasm-pack wasm-bindgen-cli wasm-opt
           wasm-pack --version
-      
+
       - name: Build AISdb
         run: |
           python -m venv .venv
@@ -66,28 +57,24 @@ jobs:
       - name: Install dependencies for API docs
         run: |
           source .venv/bin/activate || exit 1
-          python -m pip install --upgrade pip || exit 1
           python -m pip install sphinx sphinx-rtd-theme matplotlib joblib || exit 1
-            
+
       - name: Build docs
         run: |
           source .venv/bin/activate || exit 1
-          ls
           sphinx-apidoc --separate --force --implicit-namespaces --module-first -o docs/source/api aisdb aisdb/tests/* || exit 1
           python -m sphinx -a -j auto -b=html docs/source docs/dist_sphinx || exit 1
 
       - name: Upload Pages artifact
         uses: actions/upload-pages-artifact@v3
         with:
           path: docs/dist_sphinx
-        
+
       - name: Deploy to GitHub Pages
         id: deployment
         uses: actions/deploy-pages@v4
-        
-      - name: Clean Up
+
+      - name: Clean up
         run: |
-          source .venv/bin/activate || exit 1
-          rm -rf gh-pages || exit 1
           rm -rf docs/dist_sphinx
-          rm -rf .venv
+          rm -rf .venv