fix: resolve all Docker build errors

- pnpm: remove separate deps stage (cross-stage copy breaks virtual store links)
- Add .dockerignore (node_modules, .next, secrets)
- map-client.tsx: escape apostrophe, use Link instead of <a>
- cron/review-digest/route.ts: unexport signUserId (invalid Next.js route export)
- auth.ts: guard user.id undefined before eq() call
- queries.ts: fix swapped lte(Date, column) → gte(column, Date) (×2)
- Dockerfile: drop COPY public/ (directory doesn't exist)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Dockerfile

@@ -1,20 +1,16 @@
 FROM node:22-alpine AS base
 RUN corepack enable && corepack prepare pnpm@latest --activate
 
-# ── deps ─────────────────────────────────────────────────────────────────────
-FROM base AS deps
-WORKDIR /app
-COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
-RUN pnpm install --frozen-lockfile
-
 # ── builder ───────────────────────────────────────────────────────────────────
 FROM base AS builder
 WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
+# Install deps first (cached until lockfile changes)
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+RUN pnpm install --frozen-lockfile
+# Copy source and build
 COPY . .
-# Dummy env so Next.js build doesn't fail on missing vars at build time.
-# Real values are injected at runtime via docker-compose env.
 ENV NEXT_TELEMETRY_DISABLED=1
+# Dummy build-time vars — real values injected at runtime via docker-compose.
 ENV DATABASE_URL=postgresql://placeholder:placeholder@localhost:5432/curio
 ENV REDIS_URL=redis://localhost:6379
 ENV AUTH_SECRET=build-placeholder
@@ -29,7 +25,6 @@ ENV NEXT_TELEMETRY_DISABLED=1
 RUN addgroup --system --gid 1001 nodejs && \
     adduser --system --uid 1001 nextjs
 
-COPY --from=builder /app/public ./public
 COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
 
@@ -41,7 +36,8 @@ CMD ["node", "server.js"]
 # ── worker (BullMQ — needs full source + tsx) ─────────────────────────────────
 FROM base AS worker
 WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+RUN pnpm install --frozen-lockfile
 COPY . .
 ENV NODE_ENV=production
 CMD ["node_modules/.bin/tsx", "jobs/bootstrap.ts"]