feat: add tools/bump script for semver tag management

Replaces hardcoded APP_VERSION in Makefile with git-tag-driven
versioning via tools/bump. Validates clean/pushed state, checks
for tag conflicts on local and remote before creating.

Author: mchmarny

Makefile

@@ -1,5 +1,4 @@
 APP_NAME           := node-role-controller
-APP_VERSION 	   := v0.6.0
 YAML_FILES         := $(shell find . -type f \( -iname "*.yml" -o -iname "*.yaml" \) -not -path "./chart/templates/*")
 CONFIG_FILE        ?= kind.yaml
 
@@ -55,9 +54,8 @@ test: ## Run Go tests and generate coverage report
 vet: ## Vet the Go code
 	$(GO_ENV) go vet ./...
 
-tag: ## Creates a release tag
-	git tag -s -m "version bump to $(APP_VERSION)" $(APP_VERSION); \
-	git push origin $(APP_VERSION)
+tag: ## Creates a release tag (usage: make tag BUMP=patch|minor|major)
+	tools/bump $(BUMP)
 
 up: ## Create a Kubernetes cluster with KinD
 	kind create cluster --name $(APP_NAME) --config $(CONFIG_FILE) --wait 5m

tools/bump

@@ -0,0 +1,81 @@
+#!/bin/bash
+set -euo pipefail
+
+DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+. "${DIR}/common"
+
+has_tools git
+
+bump_version() {
+  local bump_type=${1:-patch}
+
+  if ! git diff-index --quiet HEAD --; then
+    err "Working directory is not clean. Please commit and push all changes before bumping version so the tag represents a clean state."
+  fi
+
+  if [ "$(git rev-list @{u}..HEAD --count 2>/dev/null || echo 0)" -gt 0 ]; then
+    err "There are unpushed commits. Please push all changes before bumping version so the tag represents the remote state."
+  fi
+
+  local current_version=$(git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0")
+
+  msg "Current version: $current_version"
+
+  local version_without_v=${current_version#v}
+  local IFS='.'
+  read -ra version_parts <<< "$version_without_v"
+  local major=${version_parts[0]:-0}
+  local minor=${version_parts[1]:-0}
+  local patch=${version_parts[2]:-0}
+
+  if [[ ! "$current_version" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+    err "Current version '$current_version' is not in semantic versioning format (x.y.z)"
+  fi
+
+  case "$bump_type" in
+    major)
+      major=$((major + 1))
+      minor=0
+      patch=0
+      ;;
+    minor)
+      minor=$((minor + 1))
+      patch=0
+      ;;
+    patch)
+      patch=$((patch + 1))
+      ;;
+    *)
+      err "Invalid bump type '$bump_type'. Use: major, minor, or patch"
+      ;;
+  esac
+
+  local new_version="v${major}.${minor}.${patch}"
+
+  if git tag --list | grep -q "^${new_version}$"; then
+    err "Version tag '${new_version}' already exists locally. Use a different bump type or manually set version."
+  fi
+
+  if git ls-remote --tags origin | grep -q "refs/tags/${new_version}$"; then
+    err "Version tag '${new_version}' already exists on remote. Use a different bump type or manually set version."
+  fi
+
+  msg "Bumping $bump_type version: $current_version → $new_version"
+
+  git tag -a "$new_version" -m "Release $new_version"
+  git push origin HEAD
+  git push origin "$new_version"
+}
+
+if [ $# -eq 0 ]; then
+  echo "Usage: $0 <bump_type>"
+  echo "Bump types: major, minor, patch"
+  echo ""
+  echo "Examples:"
+  echo "  $0 patch   # v1.2.3 → v1.2.4"
+  echo "  $0 minor   # v1.2.3 → v1.3.0"
+  echo "  $0 major   # v1.2.3 → v2.0.0"
+  exit 1
+fi
+
+bump_version "$1"

tools/common

@@ -0,0 +1,26 @@
+#!/bin/bash
+set -euo pipefail
+
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+NC='\033[0m'
+
+err() {
+    printf "${RED}[ERR]${NC} %s\n" "$1" >&2
+    exit 1
+}
+
+msg() {
+    printf "${GREEN}[MSG]${NC} %s\n" "$1" >&2
+}
+
+has_tools() {
+    local tools=("$@")
+    for tool in "${tools[@]}"; do
+        if ! command -v "$tool" &> /dev/null; then
+            err "Required tool ($tool) is not installed."
+        fi
+    done
+}