feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/api/package.json

@@ -12,11 +12,11 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "^1.2.10",
-    "@ai-sdk/openai": "^1.3.12",
-    "@fastify/compress": "^8.1.0",
+    "@ai-sdk/anthropic": "^1.2.12",
+    "@ai-sdk/openai": "^1.3.24",
+    "@fastify/compress": "^8.3.1",
     "@fastify/cookie": "^11.0.2",
-    "@fastify/cors": "^11.1.0",
+    "@fastify/cors": "^11.2.0",
     "@fastify/rate-limit": "^10.3.0",
     "@fastify/websocket": "^11.2.0",
     "@node-rs/argon2": "^2.0.2",
@@ -33,36 +33,36 @@
     "@openpanel/redis": "workspace:*",
     "@openpanel/trpc": "workspace:*",
     "@openpanel/validation": "workspace:*",
-    "@trpc/server": "^11.6.0",
-    "ai": "^4.2.10",
+    "@trpc/server": "^11.16.0",
+    "ai": "^4.3.19",
     "fast-json-stable-hash": "^1.0.3",
-    "fastify": "^5.6.1",
+    "fastify": "^5.8.4",
     "fastify-metrics": "^12.1.0",
     "fastify-raw-body": "^5.0.0",
     "groupmq": "catalog:",
-    "jsonwebtoken": "^9.0.2",
-    "ramda": "^0.29.1",
-    "sharp": "^0.33.5",
+    "jsonwebtoken": "^9.0.3",
+    "ramda": "^0.32.0",
+    "sharp": "^0.34.5",
     "source-map-support": "^0.5.21",
     "sqlstring": "^2.3.3",
     "superjson": "^1.13.3",
-    "svix": "^1.24.0",
-    "url-metadata": "^5.4.1",
+    "svix": "^1.89.0",
+    "url-metadata": "^5.4.3",
     "uuid": "^9.0.1",
     "zod": "catalog:"
   },
   "devDependencies": {
-    "@faker-js/faker": "^9.0.1",
+    "@faker-js/faker": "^9.9.0",
     "@openpanel/tsconfig": "workspace:*",
     "@types/js-yaml": "^4.0.9",
-    "@types/jsonwebtoken": "^9.0.9",
-    "@types/ramda": "^0.30.2",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/ramda": "^0.31.1",
     "@types/source-map-support": "^0.5.10",
     "@types/sqlstring": "^2.3.2",
-    "@types/uuid": "^10.0.0",
-    "@types/ws": "^8.5.14",
-    "js-yaml": "^4.1.0",
-    "tsdown": "0.14.2",
+    "@types/uuid": "^11.0.0",
+    "@types/ws": "^8.18.1",
+    "js-yaml": "^4.1.1",
+    "tsdown": "0.21.7",
     "typescript": "catalog:"
   }
 }