Build immutable policy publication artifact

Makefile

@@ -1,15 +1,33 @@
-.PHONY: build clean
+.PHONY: build check currency clean release-build release-check image-build
 
 # Publication targets. Source of truth is always the upstream repo; pages here
 # are generated and must never be hand-edited.
-SRC_NETKINGDOM ?= $(HOME)/net-kingdom
+SRC_NETKINGDOM ?= ../net-kingdom
 
 build:
-	mkdir -p build
-	python3 tools/render.py $(SRC_NETKINGDOM)/canon/standards/tenancy-posture_v0.1.md \
-	  --output build/tenancy-posture.html \
-	  --title "Tenancy Posture" \
-	  --subtitle "A framework for describing, holding and improving multi-tenancy — including where we are not there yet."
+	python3 tools/build_site.py publication.json --output build
+
+check:
+	python3 -m unittest discover -s tests -p 'test_*.py'
+	python3 -m py_compile tools/render.py tools/build_site.py tools/check_currency.py tools/verify_release.py
+	git diff --check
+
+currency:
+	python3 tools/check_currency.py publication.json
 
 clean:
 	rm -rf build
+
+release-check:
+	python3 tools/verify_release.py build
+	python3 tools/check_currency.py publication.json
+
+release-build: clean build release-check
+
+image-build: release-check
+	@test -n "$(IMAGE_REF)" || (echo "IMAGE_REF is required" >&2; exit 2)
+	docker build \
+		--file Containerfile \
+		--target local-artifact \
+		--build-arg VCS_REVISION=$$(git rev-parse HEAD) \
+		--tag $(IMAGE_REF) .