feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/db/package.json

@@ -13,7 +13,7 @@
     "with-env": "dotenv -e ../../.env -c --"
   },
   "dependencies": {
-    "@clickhouse/client": "^1.12.1",
+    "@clickhouse/client": "^1.18.2",
     "@openpanel/common": "workspace:*",
     "@openpanel/constants": "workspace:*",
     "@openpanel/json": "workspace:*",
@@ -21,13 +21,13 @@
     "@openpanel/queue": "workspace:^",
     "@openpanel/redis": "workspace:*",
     "@openpanel/validation": "workspace:*",
-    "@prisma/client": "^6.14.0",
-    "@prisma/extension-read-replicas": "^0.4.1",
+    "@prisma/client": "^6.19.2",
+    "@prisma/extension-read-replicas": "^0.5.0",
     "fast-deep-equal": "^3.1.3",
-    "jiti": "^2.4.1",
-    "mathjs": "^12.3.2",
-    "prisma-json-types-generator": "^3.1.1",
-    "ramda": "^0.29.1",
+    "jiti": "^2.6.1",
+    "mathjs": "^15.1.1",
+    "prisma-json-types-generator": "^3.6.2",
+    "ramda": "^0.32.0",
     "sqlstring": "^2.3.3",
     "superjson": "^1.13.3",
     "uuid": "^9.0.1",
@@ -36,10 +36,10 @@
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@types/node": "catalog:",
-    "@types/ramda": "^0.29.6",
+    "@types/ramda": "^0.31.1",
     "@types/sqlstring": "^2.3.2",
-    "@types/uuid": "^9.0.8",
-    "prisma": "^6.14.0",
+    "@types/uuid": "^11.0.0",
+    "prisma": "^6.19.2",
     "typescript": "catalog:"
   }
 }