build: add lint target

ober

88e8ac0de45533719cb1a86e875227ce4ceb91b9

diff --git a/Makefile b/Makefile
index a48b1d6..a07543e 100644
--- a/Makefile
+++ b/Makefile
@@ -26,8 +26,11 @@ SBOM_DIR ?= dist/sbom
 REPRODUCIBILITY_DIR ?= dist/reproducibility
 DEPLOYMENT_EVIDENCE_DIR ?= dist/deployment-evidence
 JERBOA_SITE_DEPLOYMENT_URL ?= https://jerboa.sh/
+ANSIBLE_DIR ?= $(HOME)/anon/infra_ansible
+ANSIBLE_PLAYBOOK ?= ansible-playbook
+DEPLOY_JERBOA_HOME ?= $(abspath ../jerboa)
 
-.PHONY: deps test binary binary-smoke static-binary sync-jerboa security audit sbom reproducibility-report deployment-evidence verify release-evidence clean distclean
+.PHONY: deps test binary binary-smoke static-binary sync-jerboa security audit sbom reproducibility-report deployment-evidence verify release-evidence deploy deploy-tls clean distclean lint
 
 deps:
 	@test -d "$(JERBOA_SINATRA)" || { echo "missing jerboa-sinatra checkout at $(JERBOA_SINATRA); set JERBOA_SINATRA=/path/to/checkout" >&2; exit 1; }
@@ -39,6 +42,8 @@ test:
 security:
 	bash scripts/security-check.sh
 
+lint: security
+
 audit:
 	@echo "==> jerbuild"
 	@$(JERBUILD) --version
@@ -102,6 +107,12 @@ static-binary: deps
 	mkdir -p $(dir $(STATIC_BINARY_OUTPUT))
 	JERBOA_HOME="$(JERBOA_HOME)" $(JERBUILD) binary --static-native --cc "$(STATIC_MUSL_CC)" --rust-target "$(STATIC_RUST_TARGET)" --csv-dir "$(STATIC_CSV_DIR)" --xpatch "$(STATIC_XPATCH)" --os-libs "$(STATIC_OS_LIBS)" --libdirs "$(SINATRA_LIBDIR)" $(ENTRY) $(STATIC_BINARY_OUTPUT)
 
+deploy-tls:
+	cd "$(ANSIBLE_DIR)" && $(ANSIBLE_PLAYBOOK) playbooks/jerboa_ssl.yml
+
+deploy:
+	cd "$(ANSIBLE_DIR)" && JERBOA_SITE_REPO="$(abspath .)" JERBOA_SINATRA_REPO="$(JERBOA_SINATRA)" JERBOA_HOME="$(DEPLOY_JERBOA_HOME)" $(ANSIBLE_PLAYBOOK) playbooks/jerboa_site.yml
+
 sync-jerboa:
 	tools/sync-jerboa --jerboa "$(JERBOA_HOME)" --write