feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/common/package.json

@@ -15,15 +15,15 @@
   },
   "dependencies": {
     "@openpanel/constants": "workspace:*",
-    "date-fns": "^3.3.1",
-    "lru-cache": "^11.2.4",
+    "date-fns": "^3.6.0",
+    "lru-cache": "^11.2.7",
     "luxon": "^3.7.2",
-    "mathjs": "^12.3.2",
-    "nanoid": "^5.1.6",
-    "ramda": "^0.29.1",
-    "slugify": "^1.6.6",
+    "mathjs": "^15.1.1",
+    "nanoid": "^5.1.7",
+    "ramda": "^0.32.0",
+    "slugify": "^1.6.8",
     "superjson": "^1.13.3",
-    "ua-parser-js": "^2.0.6",
+    "ua-parser-js": "^2.0.9",
     "unique-names-generator": "^4.7.1"
   },
   "devDependencies": {
@@ -31,9 +31,9 @@
     "@openpanel/validation": "workspace:*",
     "@types/luxon": "^3.7.1",
     "@types/node": "catalog:",
-    "@types/ramda": "^0.29.6",
+    "@types/ramda": "^0.31.1",
     "@types/ua-parser-js": "^0.7.39",
-    "prisma": "^5.1.1",
+    "prisma": "^5.22.0",
     "typescript": "catalog:"
   }
 }