feat: M0 monorepo skeleton with services, clients, deploy and CI

- api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info
- services/api (Go): api with oapi-codegen strict server, goose migrations,
  readiness checks for Postgres/Redis; storage-agent stub with internal token
- services/recommender (Python, uv): FastAPI health/readiness/internal status,
  `pipu-rec serve` and `pipu-rec analyze` entrypoints
- packages: generated api-client, core (server URL + server check),
  i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json)
- apps/web: Vite + React shell showing server status, language switch
- apps/mobile: Expo (SDK 53) Android app with server connect screen
- deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts
- .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release)
- scripts/version.mjs: version and Android versionCode from git tag
- tests/fixtures/music/generate.sh: synthetic test library via ffmpeg
- docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

deploy/compose.yaml

@@ -0,0 +1,104 @@
+# Продакшен-развёртывание (docs/deployment.md). Перед первым запуском: sudo ./install.sh
+# Обновление: ./update.sh <version>
+name: pipu
+
+x-library-ro: &library-ro
+  type: bind
+  source: ${PIPU_DATA:-/srv/pipu}/library
+  target: /library
+  read_only: true
+  bind: { propagation: rslave }
+
+x-restart: &restart
+  restart: unless-stopped
+
+services:
+  nginx:
+    <<: *restart
+    image: ${REGISTRY}/pipu-music-web:${PIPU_VERSION}
+    ports: ["${HTTP_PORT:-80}:80"]
+    volumes:
+      - *library-ro
+      - ${PIPU_DATA:-/srv/pipu}/cache:/cache:ro
+      - ${PIPU_DATA:-/srv/pipu}/uploads:/uploads:ro
+    depends_on: [api]
+
+  api:
+    <<: *restart
+    image: ${REGISTRY}/pipu-music-api:${PIPU_VERSION}
+    env_file: .env
+    environment: &db-env
+      DATABASE_URL: postgres://pipu:${POSTGRES_PASSWORD}@postgres:5432/pipu?sslmode=disable
+    volumes:
+      - *library-ro
+      - ${PIPU_DATA:-/srv/pipu}/cache:/cache
+      - ${PIPU_DATA:-/srv/pipu}/updates:/updates
+      - ${PIPU_DATA:-/srv/pipu}/uploads:/uploads
+    depends_on:
+      postgres: { condition: service_healthy }
+      redis: { condition: service_started }
+      storage-agent: { condition: service_started }
+
+  storage-agent:
+    <<: *restart
+    image: ${REGISTRY}/pipu-music-storage-agent:${PIPU_VERSION}
+    cap_add: [SYS_ADMIN]
+    security_opt: ["apparmor:unconfined"]
+    environment:
+      INTERNAL_TOKEN: ${INTERNAL_TOKEN}
+      LIBRARY_ROOT: /library
+    volumes:
+      - type: bind
+        source: ${PIPU_DATA:-/srv/pipu}/library
+        target: /library
+        bind: { propagation: rshared }
+      - ${PIPU_DATA:-/srv/pipu}/uploads:/uploads:ro
+
+  recommender:
+    <<: *restart
+    image: ${REGISTRY}/pipu-music-recommender:${PIPU_VERSION}
+    command: ["serve"]
+    env_file: .env
+    environment: *db-env
+    depends_on:
+      postgres: { condition: service_healthy }
+
+  analyzer:
+    <<: *restart
+    image: ${REGISTRY}/pipu-music-recommender:${PIPU_VERSION}
+    command: ["analyze", "--workers", "4"]
+    env_file: .env
+    environment: *db-env
+    volumes:
+      - *library-ro
+      - ${PIPU_DATA:-/srv/pipu}/models:/models
+    deploy: { resources: { limits: { cpus: "4" } } }
+    depends_on:
+      postgres: { condition: service_healthy }
+
+  postgres:
+    <<: *restart
+    image: pgvector/pgvector:pg17
+    environment:
+      POSTGRES_USER: pipu
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: pipu
+    volumes: [ "${PIPU_DATA:-/srv/pipu}/postgres:/var/lib/postgresql/data" ]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U pipu -d pipu"]
+      interval: 5s
+      retries: 20
+
+  redis:
+    <<: *restart
+    image: redis:7-alpine
+    command: ["redis-server", "--appendonly", "yes"]
+    volumes: [ "${PIPU_DATA:-/srv/pipu}/redis:/data" ]
+
+  meilisearch:
+    <<: *restart
+    image: getmeili/meilisearch:v1.11
+    environment:
+      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
+      MEILI_ENV: production
+    volumes: [ "${PIPU_DATA:-/srv/pipu}/meili:/meili_data" ]