Require all gates to pass before deployment

Deploy jobs now wait for:
- build_image: Container image built
- kics: Infrastructure security scan
- hadolint: Dockerfile linting
- python_tests: Backend unit tests
- frontend_tests: Frontend unit tests

All gates must pass before deployment proceeds.

.gitlab-ci.yml

@@ -175,7 +175,7 @@ frontend_tests:
 # Shared deploy configuration
 .deploy_template: &deploy_template
   stage: deploy
-  needs: [build_image]
+  needs: [build_image, kics, hadolint, python_tests, frontend_tests]
   image: deps.global.bsf.tools/registry-1.docker.io/alpine/k8s:1.29.12
 
 .helm_setup: &helm_setup