ci: refonte pipeline selon bonnes pratiques sonic

- Format when/steps migré vers liste Woodpecker next
- Séparation from_secret / volumes (bug Woodpecker)
- Ajout security-check, SBOM (syft+trivy+dtrack), write-env,
  test-env, test-deploy, healthcheck, notify-failure
- Deploy SSH → volumes Docker (docker.sock + /opt/libredecision)
- privileged: true sur les steps docker-buildx

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.woodpecker.yml

@@ -31,6 +31,7 @@ steps:
 
   - name: docker-backend
     image: woodpeckerci/plugin-docker-buildx
+    privileged: true
     depends_on:
       - test-backend
     settings:
@@ -50,6 +51,7 @@ steps:
 
   - name: docker-frontend
     image: woodpeckerci/plugin-docker-buildx
+    privileged: true
     depends_on:
       - test-frontend
     settings: