feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

package.json

@@ -5,7 +5,7 @@
   "private": true,
   "license": "MIT",
   "author": "Carl-Gerhard Lindesvärd",
-  "packageManager": "pnpm@10.6.2",
+  "packageManager": "pnpm@10.33.0",
   "scripts": {
     "test": "vitest run",
     "gen:bots": "pnpm -r --filter api gen:bots",
@@ -30,11 +30,11 @@
     "pre-push": "[ -n \"$SKIP_HOOKS\" ] || (pnpm typecheck && pnpm test)"
   },
   "dependencies": {
-    "@hyperdx/node-opentelemetry": "^0.8.1",
-    "dotenv-cli": "^7.3.0",
-    "semver": "^7.5.4",
+    "@hyperdx/node-opentelemetry": "^0.10.3",
+    "dotenv-cli": "^7.4.4",
+    "semver": "^7.7.4",
     "typescript": "catalog:",
-    "winston": "^3.14.2"
+    "winston": "^3.19.0"
   },
   "trustedDependencies": [
     "@biomejs/biome",
@@ -49,18 +49,19 @@
     "sharp"
   ],
   "devDependencies": {
-    "@biomejs/biome": "2.3.15",
+    "@biomejs/biome": "2.4.10",
     "depcheck": "^1.4.7",
-    "simple-git-hooks": "^2.12.1",
-    "ultracite": "7.2.0",
-    "vitest": "^3.0.4"
+    "simple-git-hooks": "^2.13.1",
+    "ultracite": "7.4.0",
+    "vitest": "^3.2.4"
   },
   "pnpm": {
     "patchedDependencies": {
-      "nuqs": "patches/nuqs.patch"
+      "nuqs": "patches/nuqs.patch",
+      "buffer-equal-constant-time": "patches/buffer-equal-constant-time.patch"
     },
     "overrides": {
-      "rolldown": "1.0.0-beta.43",
+      "rolldown": "1.0.0-rc.12",
       "esm-env": "npm:esm-env-runtime@^0.1.0"
     }
   }