feat: M0 monorepo skeleton with services, clients, deploy and CI

- api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info
- services/api (Go): api with oapi-codegen strict server, goose migrations,
  readiness checks for Postgres/Redis; storage-agent stub with internal token
- services/recommender (Python, uv): FastAPI health/readiness/internal status,
  `pipu-rec serve` and `pipu-rec analyze` entrypoints
- packages: generated api-client, core (server URL + server check),
  i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json)
- apps/web: Vite + React shell showing server status, language switch
- apps/mobile: Expo (SDK 53) Android app with server connect screen
- deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts
- .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release)
- scripts/version.mjs: version and Android versionCode from git tag
- tests/fixtures/music/generate.sh: synthetic test library via ffmpeg
- docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

services/recommender/pipu_rec/__init__.py

@@ -0,0 +1,3 @@
+"""Pipu Music: сервис рекомендаций и аудиоанализа (см. docs/recommendations.md)."""
+
+__version__ = "0.0.0-dev"

services/recommender/pipu_rec/api/app.py

@@ -0,0 +1,48 @@
+"""FastAPI-приложение внутреннего API рекомендаций."""
+
+import hmac
+from collections.abc import Awaitable, Callable
+from typing import Annotated
+
+from fastapi import Depends, FastAPI, Header, HTTPException, status
+from fastapi.responses import JSONResponse
+
+from pipu_rec.settings import Settings
+
+Check = Callable[[], Awaitable[None]]
+
+
+def create_app(settings: Settings, checks: dict[str, Check] | None = None) -> FastAPI:
+    app = FastAPI(title="pipu-recommender", version=settings.version, docs_url=None, redoc_url=None)
+    checks = checks or {}
+
+    def require_token(authorization: Annotated[str, Header()] = "") -> None:
+        scheme, _, token = authorization.partition(" ")
+        expected = settings.internal_token
+        if scheme != "Bearer" or not expected or not hmac.compare_digest(token, expected):
+            raise HTTPException(status.HTTP_401_UNAUTHORIZED, detail="auth.invalid_internal_token")
+
+    @app.get("/healthz")
+    async def healthz() -> dict[str, str]:
+        return {"status": "ok"}
+
+    @app.get("/readyz")
+    async def readyz() -> JSONResponse:
+        results: dict[str, str] = {}
+        for name, check in checks.items():
+            try:
+                await check()
+                results[name] = "ok"
+            except Exception as exc:
+                results[name] = str(exc) or type(exc).__name__
+        healthy = all(v == "ok" for v in results.values())
+        return JSONResponse(
+            {"status": "ok" if healthy else "degraded", "checks": results},
+            status_code=status.HTTP_200_OK if healthy else status.HTTP_503_SERVICE_UNAVAILABLE,
+        )
+
+    @app.get("/internal/status", dependencies=[Depends(require_token)])
+    async def internal_status() -> dict[str, object]:
+        return {"version": settings.version, "models": [], "ranker": "heuristic-v1"}
+
+    return app

services/recommender/pipu_rec/cli.py

@@ -0,0 +1,59 @@
+"""Точка входа: `pipu-rec serve` (онлайн-API) или `pipu-rec analyze` (воркер аудиоанализа)."""
+
+import argparse
+import asyncio
+import logging
+
+import psycopg
+import redis.asyncio as aioredis
+import uvicorn
+
+from pipu_rec.api.app import create_app
+from pipu_rec.settings import Settings
+
+log = logging.getLogger("pipu_rec")
+
+
+def _serve(settings: Settings) -> None:
+    rdb = aioredis.Redis.from_url(settings.redis_url)
+
+    async def check_postgres() -> None:
+        async with await psycopg.AsyncConnection.connect(settings.database_url, connect_timeout=2) as conn:
+            await conn.execute("SELECT 1")
+
+    async def check_redis() -> None:
+        await rdb.ping()
+
+    app = create_app(settings, {"postgres": check_postgres, "redis": check_redis})
+    uvicorn.run(app, host=settings.http_host, port=settings.http_port, log_level=settings.log_level)
+
+
+def _analyze(settings: Settings, workers: int) -> None:
+    # Аудиоанализ (Essentia) появится в M4; сейчас воркер только держит процесс живым.
+    log.info("analyzer started: workers=%d version=%s (no-op until M4)", workers, settings.version)
+
+    async def idle() -> None:
+        while True:
+            await asyncio.sleep(3600)
+
+    asyncio.run(idle())
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(prog="pipu-rec")
+    sub = parser.add_subparsers(dest="cmd", required=True)
+    sub.add_parser("serve", help="внутренний API рекомендаций")
+    analyze = sub.add_parser("analyze", help="воркер аудиоанализа")
+    analyze.add_argument("--workers", type=int, default=4)
+    args = parser.parse_args()
+
+    settings = Settings()
+    logging.basicConfig(level=settings.log_level.upper())
+    if args.cmd == "serve":
+        _serve(settings)
+    else:
+        _analyze(settings, args.workers)
+
+
+if __name__ == "__main__":
+    main()

services/recommender/pipu_rec/settings.py

@@ -0,0 +1,16 @@
+"""Конфигурация сервиса из переменных окружения."""
+
+from pydantic import Field
+from pydantic_settings import BaseSettings, SettingsConfigDict
+
+
+class Settings(BaseSettings):
+    model_config = SettingsConfigDict(env_prefix="", extra="ignore")
+
+    http_host: str = "0.0.0.0"
+    http_port: int = 8000
+    database_url: str = Field(default="postgresql://pipu:pipu@postgres:5432/pipu")
+    redis_url: str = Field(default="redis://redis:6379/0")
+    internal_token: str = Field(default="", description="Общий секрет для вызовов из api")
+    log_level: str = "info"
+    version: str = Field(default="0.0.0-dev", alias="PIPU_VERSION")