feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/trpc/package.json

@@ -16,17 +16,17 @@
     "@openpanel/integrations": "workspace:^",
     "@openpanel/js-runtime": "workspace:*",
     "@openpanel/payments": "workspace:^",
+    "@openpanel/queue": "workspace:*",
     "@openpanel/redis": "workspace:*",
     "@openpanel/validation": "workspace:*",
-    "@openpanel/queue": "workspace:*",
     "@trpc-limiter/redis": "^0.0.2",
-    "@trpc/client": "^11.6.0",
-    "@trpc/server": "^11.6.0",
-    "date-fns": "^3.3.1",
-    "mathjs": "^12.3.2",
+    "@trpc/client": "^11.16.0",
+    "@trpc/server": "^11.16.0",
+    "date-fns": "^3.6.0",
+    "mathjs": "^15.1.1",
     "prisma-error-enum": "^0.1.3",
-    "ramda": "^0.29.1",
-    "short-unique-id": "^5.0.3",
+    "ramda": "^0.32.0",
+    "short-unique-id": "^5.3.2",
     "sqlstring": "^2.3.3",
     "superjson": "^1.13.3",
     "uuid": "^9.0.1",
@@ -35,9 +35,9 @@
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@types/node": "catalog:",
-    "@types/ramda": "^0.29.6",
+    "@types/ramda": "^0.31.1",
     "@types/sqlstring": "^2.3.2",
-    "prisma": "^5.1.1",
+    "prisma": "^5.22.0",
     "typescript": "catalog:"
   }
 }