feat: stabilize API startup and lifecycle management

- Refactor server initialization to separate concerns and improve error handling.
- Implement centralized environment validation using Zod.
- Introduce database, Redis, and queue lifecycle management.
- Add health check endpoints for liveness and readiness.
- Enhance error handling middleware for better response structure.
- Implement rate limiting for API endpoints.
- Add request ID middleware for traceability.
- Create Sequelize CLI configuration and baseline migration for schema management.
- Establish CI workflow with Gitea for testing and syntax checks.
- Document foundational changes and migration strategy in PHASE_0_FOUNDATION_STABILIZATION.md.
- Add Docker Compose configuration for local development and testing.
- Implement unit and integration tests for critical functionality.

Dockerfile

@@ -1,44 +1,22 @@
-FROM node:20-slim
+FROM node:22-slim
 
-# Install Chromium + dependencies
 RUN apt-get update && apt-get install -y \
-  chromium \
-  fonts-liberation \
-  libatk-bridge2.0-0 \
-  libatk1.0-0 \
-  libcups2 \
-  libxcomposite1 \
-  libxrandr2 \
-  libxdamage1 \
-  libgbm1 \
-  libasound2 \
-  libpangocairo-1.0-0 \
-  libpango-1.0-0 \
-  libnss3 \
-  libxss1 \
-  libgtk-3-0 \
-  libdrm2 \
-  libxshmfence1 \
-  ca-certificates \
-  --no-install-recommends \
-  && rm -rf /var/lib/apt/lists/*
-
-# Tell Puppeteer to use system Chromium
-ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
-
-# Prevent Puppeteer from downloading its own Chromium
-ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+  chromium curl fonts-liberation libatk-bridge2.0-0 libatk1.0-0 libcups2 \
+  libxcomposite1 libxrandr2 libxdamage1 libgbm1 libasound2 libpangocairo-1.0-0 \
+  libpango-1.0-0 libnss3 libxss1 libgtk-3-0 libdrm2 libxshmfence1 ca-certificates \
+  --no-install-recommends && rm -rf /var/lib/apt/lists/*
 
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium \
+    PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
+    NODE_ENV=production
 
 WORKDIR /app
-
 COPY package*.json ./
-RUN npm ci --omit=dev
-
-COPY . .
-
-ENV NODE_ENV=production
+RUN npm ci --omit=dev && npm cache clean --force
+COPY --chown=node:node . .
 
+USER node
 EXPOSE 3070
-
-CMD ["node", "server.js"]
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
+  CMD curl --fail --silent http://127.0.0.1:3070/health/live > /dev/null || exit 1
+CMD ["node", "server.js"]