M0: Docker + Fabled-Git CI (typecheck + lint + test + build)

- 2-stage Dockerfile (node:22 build Vue -> python:3.12-slim runtime); CMD runs
  `alembic upgrade head` then hypercorn (rule 82).
- .forgejo/workflows/ci.yml on ci-python:3.14: typecheck (vue-tsc) + lint
  (ruff check src/) + test (uv venv + pytest, DB-free) + gated buildx push with
  the rule-46 tag scheme (:dev/:latest/:<sha>). No local integration lane yet.
- ci-requirements.md (rule 39); docker-compose for a local app+Postgres stack.
- Real README with layout, dev instructions, and the milestone arc.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FRgehjoz7Yv8LkUfADxACm

docker-compose.yml

@@ -0,0 +1,35 @@
+# Local two-service stack (app + Postgres). Provided for convenience — per family
+# rule 12 the agent does NOT start this; run it yourself with `docker compose up`.
+services:
+  db:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_USER: thoughtsync
+      POSTGRES_PASSWORD: thoughtsync
+      POSTGRES_DB: thoughtsync
+    volumes:
+      - thoughtsync-db:/var/lib/postgresql/data
+    ports:
+      - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U thoughtsync"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  app:
+    build: .
+    depends_on:
+      db:
+        condition: service_healthy
+    environment:
+      THOUGHTSYNC_DATABASE_URL: postgresql+asyncpg://thoughtsync:thoughtsync@db:5432/thoughtsync
+      THOUGHTSYNC_DATA_DIR: /data
+    volumes:
+      - thoughtsync-data:/data
+    ports:
+      - "5000:5000"
+
+volumes:
+  thoughtsync-db:
+  thoughtsync-data: