feat: Docker production setup (Portainer + Traefik)

Adds multi-stage Dockerfile (runner + worker targets), docker-compose.prod.yml
with Traefik labels, auto-migration on deploy, and next.config.ts standalone
output mode.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Dockerfile

@@ -0,0 +1,49 @@
+FROM node:22-alpine AS base
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# ── deps ─────────────────────────────────────────────────────────────────────
+FROM base AS deps
+WORKDIR /app
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+RUN pnpm install --frozen-lockfile
+
+# ── builder ───────────────────────────────────────────────────────────────────
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+# Dummy env so Next.js build doesn't fail on missing vars at build time.
+# Real values are injected at runtime via docker-compose env.
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV DATABASE_URL=postgresql://placeholder:placeholder@localhost:5432/curio
+ENV REDIS_URL=redis://localhost:6379
+ENV AUTH_SECRET=build-placeholder
+RUN pnpm build
+
+# ── runner ────────────────────────────────────────────────────────────────────
+FROM node:22-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+EXPOSE 3000
+ENV PORT=3000
+ENV HOSTNAME=0.0.0.0
+
+CMD ["node", "server.js"]
+
+# ── worker (BullMQ — needs full source + tsx) ─────────────────────────────────
+FROM base AS worker
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ENV NODE_ENV=production
+CMD ["node_modules/.bin/tsx", "jobs/bootstrap.ts"]