feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/worker/package.json

@@ -11,8 +11,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@bull-board/api": "6.14.0",
-    "@bull-board/express": "6.14.0",
+    "@bull-board/api": "6.20.6",
+    "@bull-board/express": "6.20.6",
     "@openpanel/common": "workspace:*",
     "@openpanel/db": "workspace:*",
     "@openpanel/email": "workspace:*",
@@ -24,24 +24,25 @@
     "@openpanel/payments": "workspace:*",
     "@openpanel/queue": "workspace:*",
     "@openpanel/redis": "workspace:*",
-    "bullmq": "^5.63.0",
-    "date-fns": "^3.3.1",
-    "express": "^4.18.2",
+    "@openpanel/validation": "workspace:*",
+    "bullmq": "^5.71.1",
+    "date-fns": "^3.6.0",
+    "express": "^4.22.1",
     "groupmq": "catalog:",
     "prom-client": "^15.1.3",
-    "ramda": "^0.29.1",
+    "ramda": "^0.32.0",
     "source-map-support": "^0.5.21",
     "sqlstring": "^2.3.3",
     "uuid": "^9.0.1"
   },
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
-    "@types/express": "^4.17.21",
-    "@types/ramda": "^0.29.6",
+    "@types/express": "^5.0.6",
+    "@types/ramda": "^0.31.1",
     "@types/source-map-support": "^0.5.10",
     "@types/sqlstring": "^2.3.2",
-    "@types/uuid": "^9.0.8",
-    "tsdown": "0.14.2",
+    "@types/uuid": "^11.0.0",
+    "tsdown": "0.21.7",
     "typescript": "catalog:"
   }
 }