feat: CI/CD pour packages .deb et .rpm + tests d'installation

Nouveaux workflows GitHub Actions:
- .github/workflows/build-deb.yml : Build et release DEB sur Ubuntu
- .github/workflows/build-rpm.yml : Build et release RPM sur Fedora
- Déclenchement sur tags v*, push main/master, workflow_dispatch
- Upload des artifacts et création automatique de release

Système de build de packages:
- packaging/build-deb.sh : Script de build .deb avec sanitization version
- packaging/build-rpm.sh : Script de build .rpm (via Docker)
- packaging/Dockerfile.deb : Container Ubuntu 22.04 pour build DEB
- packaging/Dockerfile.rpm : Container Go 1.24 + rpm pour build RPM

Fichiers de configuration systemd:
- packaging/systemd/ja4sentinel.service : Unit avec security hardening
  * NoNewPrivileges, ProtectSystem, ProtectHome
  * CAP_NET_RAW, CAP_NET_ADMIN pour packet capture
- packaging/systemd/config.yml : Configuration par défaut

Scripts mainteneur DEB:
- packaging/deb/postinst : Création user/group, dirs, config
- packaging/deb/prerm : Stop service avant upgrade/remove
- packaging/deb/postrm : Cleanup complet en purge

Spec file RPM:
- packaging/rpm/ja4sentinel.spec : Spec complet avec dependencies
  * Requires: systemd, libpcap
  * %pre/%post/%preun/%postun scripts

Tests d'installation dans containers:
- packaging/test/test-deb.sh : Build + test Docker Ubuntu
- packaging/test/test-rpm.sh : Build + test Docker Fedora
- packaging/test/test-install-deb.sh : 11 tests automatisés
- packaging/test/test-install-rpm.sh : 11 tests automatisés
- Dockerfile.deb/rpm : Containers de test dédiés

Makefile:
- package-deb : Build .deb
- package-rpm : Build .rpm via Docker (no-cache)
- package : Build les deux
- test-package-deb : Build + test installation DEB
- test-package-rpm : Build + test installation RPM
- test-package : Test les deux packages

Tests:
- ✅ DEB: 11/11 tests passés (binaire, config, service, user, dirs)
- ✅ RPM: Build réussi (3.3 MB)
- Version sanitization pour git tags (ex: efd4481-dirty → 0.0.0+efd4481-dirty)

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

packaging/deb/postinst

@@ -0,0 +1,66 @@
+#!/bin/bash
+set -e
+
+# postinst script for ja4sentinel .deb package
+
+case "$1" in
+    configure)
+        # Create ja4sentinel user and group if they don't exist
+        if ! getent group ja4sentinel > /dev/null 2>&1; then
+            groupadd --system ja4sentinel
+        fi
+        
+        if ! getent passwd ja4sentinel > /dev/null 2>&1; then
+            useradd --system \
+                --gid ja4sentinel \
+                --home-dir /var/lib/ja4sentinel \
+                --no-create-home \
+                --shell /usr/sbin/nologin \
+                ja4sentinel
+        fi
+        
+        # Create necessary directories
+        mkdir -p /var/lib/ja4sentinel
+        mkdir -p /var/run/ja4sentinel
+        mkdir -p /var/log/ja4sentinel
+        mkdir -p /etc/ja4sentinel
+        
+        # Set proper ownership
+        chown -R ja4sentinel:ja4sentinel /var/lib/ja4sentinel
+        chown -R ja4sentinel:ja4sentinel /var/run/ja4sentinel
+        chown -R ja4sentinel:ja4sentinel /var/log/ja4sentinel
+        chown -R ja4sentinel:ja4sentinel /etc/ja4sentinel
+        
+        # Set proper permissions
+        chmod 750 /var/lib/ja4sentinel
+        chmod 750 /var/log/ja4sentinel
+        chmod 750 /etc/ja4sentinel
+        
+        # Install default config if it doesn't exist
+        if [ ! -f /etc/ja4sentinel/config.yml ]; then
+            cp /usr/share/ja4sentinel/config.yml /etc/ja4sentinel/config.yml
+            chown ja4sentinel:ja4sentinel /etc/ja4sentinel/config.yml
+            chmod 640 /etc/ja4sentinel/config.yml
+        fi
+        
+        # Enable and start the service (if running in a real system, not container)
+        if [ -x /bin/systemctl ] && [ -d /run/systemd/system ]; then
+            systemctl daemon-reload
+            systemctl enable ja4sentinel.service
+            if ! systemctl is-active --quiet ja4sentinel.service; then
+                systemctl start ja4sentinel.service
+            fi
+        fi
+        ;;
+    
+    abort-upgrade|abort-remove|abort-deconfigure)
+        # On abort, do nothing special
+        ;;
+    
+    *)
+        echo "postinst called with unknown argument '$1'" >&2
+        exit 1
+        ;;
+esac
+
+exit 0