Harden production deployment workflow

eslint.config.mjs

@@ -0,0 +1,35 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { FlatCompat } from '@eslint/eslintrc'
+
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+const compat = new FlatCompat({
+  baseDirectory: dirname,
+})
+
+export default [
+  {
+    ignores: [
+      '.next/**',
+      '.next-dev/**',
+      '.turbo/**',
+      '.claude/**',
+      '.tmp/**',
+      'media/**',
+      'files/**',
+      'node_modules/**',
+      'public/src/**',
+      'src/seed/raw/**',
+      'src/seed/structured/**',
+      'src/seed/normalized/**',
+      'src/payload-types.ts',
+    ],
+  },
+  ...compat.extends('next/core-web-vitals', 'next/typescript'),
+  {
+    rules: {
+      '@next/next/no-img-element': 'off',
+      '@typescript-eslint/no-unused-vars': 'off',
+    },
+  },
+]