add shellspec golden harness for the legacy make engine

- spec/golden/cases.txt: 69 black-box cases (CLI wrapper mode and make
  include mode) run in a hermetic sandbox with a mocked docker
- spec/golden/expected/*.txt recorded from this engine (baseline)
- make test / test-golden / golden-record / lint dev targets

spec/fixtures/app-git/.env.dist

@@ -0,0 +1,2 @@
+APP_SERVICE_8080_TAGS=urlprefix-app.${DOMAIN}/*
+POSTGRES_PASSWORD=changeme

spec/fixtures/app-git/Makefile

@@ -0,0 +1,2 @@
+MYOS ?= /usr/local/lib/myos
+-include $(MYOS)/make/include.mk

spec/fixtures/app-git/docker-compose.local.yml

@@ -0,0 +1,4 @@
+services:
+  app:
+    environment:
+      DEBUG: "true"

spec/fixtures/app-git/docker-compose.yml

@@ -0,0 +1,13 @@
+services:
+  app:
+    image: alpine:3.20
+    command: sleep infinity
+    environment:
+      APP_DOMAIN: ${APP_DOMAIN}
+      DOMAIN: ${DOMAIN}
+    labels:
+      - SERVICE_8080_NAME=${COMPOSE_SERVICE_NAME}-app-8080
+      - SERVICE_8080_TAGS=${APP_SERVICE_8080_TAGS:-urlprefix-app.localhost/*}
+    networks:
+      - default
+      - private

spec/fixtures/app-git/docker/docker-compose.yml

@@ -0,0 +1,5 @@
+services:
+  db:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}

spec/fixtures/app-nogit/docker-compose.yml

@@ -0,0 +1,3 @@
+services:
+  web:
+    image: nginx:alpine

spec/fixtures/home/.local/share/myos/stack/User/User.yml

@@ -0,0 +1,6 @@
+services:
+  myos:
+    image: ${USER_DOCKER_IMAGE:-myos:latest}
+    container_name: ${USER_COMPOSE_PROJECT_NAME:-user}
+    volumes:
+      - ${USER_DOCKER_VOLUME:-user}:/tmp/ssh-agent

spec/fixtures/home/.local/share/myos/stack/default.mk

@@ -0,0 +1 @@
+default                         ?= postgres redis

spec/fixtures/home/.local/share/myos/stack/drone/drone.1.6.yml

@@ -0,0 +1,3 @@
+services:
+  drone:
+    image: drone/drone:1.6

spec/fixtures/home/.local/share/myos/stack/drone/drone.mk

@@ -0,0 +1,2 @@
+DRONE_SERVER_HOST               ?= drone.$(DOMAIN)
+ENV_VARS                        += DRONE_SERVER_HOST

spec/fixtures/home/.local/share/myos/stack/drone/drone.yml

@@ -0,0 +1,7 @@
+services:
+  drone:
+    image: drone/drone:${DRONE_VERSION:-latest}
+    environment:
+      DRONE_SERVER_HOST: ${DRONE_SERVER_HOST:-drone.localhost}
+    networks:
+      - private

spec/fixtures/home/.local/share/myos/stack/host/nginx.dns.yml

@@ -0,0 +1,4 @@
+services:
+  nginx:
+    volumes:
+      - dns:/dns

spec/fixtures/home/.local/share/myos/stack/host/nginx.www.yml

@@ -0,0 +1,4 @@
+services:
+  nginx:
+    volumes:
+      - www:/var/www

spec/fixtures/home/.local/share/myos/stack/host/nginx.yml

@@ -0,0 +1,6 @@
+services:
+  nginx:
+    image: nginx:alpine
+    container_name: ${HOST_COMPOSE_PROJECT_NAME:-localhost}-nginx
+    ports:
+      - "8080:80"

spec/fixtures/home/.local/share/myos/stack/postgres/postgres.9.6.yml

@@ -0,0 +1,3 @@
+services:
+  postgres:
+    image: postgres:9.6

spec/fixtures/home/.local/share/myos/stack/postgres/postgres.local.yml

@@ -0,0 +1,4 @@
+services:
+  postgres:
+    ports:
+      - "5432:5432"

spec/fixtures/home/.local/share/myos/stack/postgres/postgres.yml

@@ -0,0 +1,13 @@
+services:
+  postgres:
+    image: postgres:${POSTGRES_VERSION:-latest}
+    environment:
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
+    labels:
+      - SERVICE_5432_NAME=${COMPOSE_SERVICE_NAME}-postgres-5432
+    networks:
+      - private
+    volumes:
+      - postgres:/var/lib/postgresql/data
+volumes:
+  postgres:

spec/fixtures/home/.local/share/myos/stack/redis/redis.yml

@@ -0,0 +1,5 @@
+services:
+  redis:
+    image: redis:alpine
+    networks:
+      - private

spec/fixtures/home/.local/share/myos/stack/testing.mk

@@ -0,0 +1 @@
+testing                         ?= drone/drone redis

spec/fixtures/host-project/stack/host/consul.yml

@@ -0,0 +1,12 @@
+services:
+  consul:
+    image: hashicorp/consul:1.15
+    container_name: ${HOST_COMPOSE_PROJECT_NAME:-localhost}-consul
+    network_mode: host
+    restart: always
+    environment:
+      CONSUL_HTTP_TOKEN: ${HOST_CONSUL_HTTP_TOKEN}
+    volumes:
+      - consul:/consul/data
+volumes:
+  consul:

spec/fixtures/host-project/stack/host/fabio.yml

@@ -0,0 +1,13 @@
+services:
+  fabio:
+    image: fabiolb/fabio:1.6.3
+    container_name: ${HOST_COMPOSE_PROJECT_NAME:-localhost}-fabio
+    depends_on: [consul]
+    ports:
+      - "80:80"
+      - "443:443"
+    environment:
+      FABIO_REGISTRY_CONSUL_ADDR: ${DOCKER_HOST_INET4:-127.0.0.1}:8500
+      FABIO_LOG_ACCESS_TARGET: ${HOST_FABIO_LOG_ACCESS:-}
+    networks:
+      - public

spec/fixtures/host-project/stack/host/host.mk

@@ -0,0 +1,10 @@
+# Stack host: consul + fabio (80/443) + registrator, one instance per host.
+host                            ?= host/consul host/fabio host/registrator
+
+.PHONY: host
+host:
+	$(call make,up STACK="$(host)")
+
+.PHONY: host-down
+host-down:
+	$(call make,down STACK="$(host)")

spec/fixtures/host-project/stack/host/registrator.yml

@@ -0,0 +1,9 @@
+services:
+  registrator:
+    image: gliderlabs/registrator:master
+    container_name: ${HOST_COMPOSE_PROJECT_NAME:-localhost}-registrator
+    network_mode: host
+    depends_on: [consul]
+    command: -internal=false -useIpFromLabel SERVICE_ADDRESS consul://127.0.0.1:8500
+    volumes:
+      - ${DOCKER_SOCKET_LOCATION:-/var/run/docker.sock}:/tmp/docker.sock