🚀 ci(picture): add picture app to CI/CD deployment pipeline

- Add picture-backend and picture-web to CI Docker build matrix
- Add picture services to staging deployment workflow
- Add picture-backend to production deployment workflow
- Create Dockerfile and docker-entrypoint.sh for picture-web
- Fix picture-backend Dockerfile port (3003→3006) and health endpoint
- Add picture routes to Caddyfile.staging
- Add REPLICATE_API_TOKEN and MANA_CORE_SERVICE_KEY env vars

apps/picture/apps/web/Dockerfile

@@ -0,0 +1,95 @@
+# Build stage
+FROM node:20-alpine AS builder
+
+# Build arguments for SvelteKit static env vars
+ARG PUBLIC_BACKEND_URL=http://picture-backend:3006
+ARG PUBLIC_MANA_CORE_AUTH_URL=http://mana-core-auth:3001
+
+# Set as environment variables for build
+ENV PUBLIC_BACKEND_URL=$PUBLIC_BACKEND_URL
+ENV PUBLIC_MANA_CORE_AUTH_URL=$PUBLIC_MANA_CORE_AUTH_URL
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
+
+WORKDIR /app
+
+# Copy root workspace files
+COPY pnpm-workspace.yaml ./
+COPY package.json ./
+COPY pnpm-lock.yaml ./
+
+# Copy shared packages needed by picture web
+COPY packages/better-auth-types ./packages/better-auth-types
+COPY packages/shared-auth ./packages/shared-auth
+COPY packages/shared-auth-ui ./packages/shared-auth-ui
+COPY packages/shared-branding ./packages/shared-branding
+COPY packages/shared-feedback-service ./packages/shared-feedback-service
+COPY packages/shared-feedback-types ./packages/shared-feedback-types
+COPY packages/shared-feedback-ui ./packages/shared-feedback-ui
+COPY packages/shared-i18n ./packages/shared-i18n
+COPY packages/shared-icons ./packages/shared-icons
+COPY packages/shared-tailwind ./packages/shared-tailwind
+COPY packages/shared-theme ./packages/shared-theme
+COPY packages/shared-theme-ui ./packages/shared-theme-ui
+COPY packages/shared-subscription-types ./packages/shared-subscription-types
+COPY packages/shared-subscription-ui ./packages/shared-subscription-ui
+COPY packages/shared-profile-ui ./packages/shared-profile-ui
+COPY packages/shared-ui ./packages/shared-ui
+COPY packages/shared-utils ./packages/shared-utils
+
+# Copy picture packages
+COPY apps/picture/packages ./apps/picture/packages
+COPY apps/picture/apps/web ./apps/picture/apps/web
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Build shared packages that need building
+WORKDIR /app/packages/better-auth-types
+RUN pnpm build || true
+
+WORKDIR /app/packages/shared-auth
+RUN pnpm build || true
+
+# Build the web app
+WORKDIR /app/apps/picture/apps/web
+RUN pnpm build
+
+# Production stage
+FROM node:20-alpine AS production
+
+# Keep same directory structure as builder so pnpm symlinks resolve correctly
+WORKDIR /app/apps/picture/apps/web
+
+# Copy the pnpm store that symlinks point to (at /app/node_modules/.pnpm)
+COPY --from=builder /app/node_modules/.pnpm /app/node_modules/.pnpm
+
+# Copy the app's node_modules (contains symlinks to the pnpm store)
+COPY --from=builder /app/apps/picture/apps/web/node_modules ./node_modules
+
+# Copy built application
+COPY --from=builder /app/apps/picture/apps/web/build ./build
+COPY --from=builder /app/apps/picture/apps/web/package.json ./
+
+# Copy entrypoint script for runtime config generation
+COPY apps/picture/apps/web/docker-entrypoint.sh /usr/local/bin/
+RUN chmod +x /usr/local/bin/docker-entrypoint.sh
+
+# Expose port
+EXPOSE 5175
+
+# Set environment variables
+ENV NODE_ENV=production
+ENV PORT=5175
+ENV HOST=0.0.0.0
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:5175/health || exit 1
+
+# Use entrypoint to generate runtime config
+ENTRYPOINT ["docker-entrypoint.sh"]
+
+# Run the app
+CMD ["node", "build"]

apps/picture/apps/web/docker-entrypoint.sh

@@ -0,0 +1,31 @@
+#!/bin/sh
+set -e
+
+echo "Generating runtime configuration..."
+
+# Environment variables with development defaults
+BACKEND_URL=${BACKEND_URL:-"http://localhost:3006"}
+AUTH_URL=${AUTH_URL:-"http://localhost:3001"}
+
+echo "Config values:"
+echo "   BACKEND_URL: $BACKEND_URL"
+echo "   AUTH_URL: $AUTH_URL"
+
+# Generate config.json from environment variables
+cat > /app/apps/picture/apps/web/build/client/config.json <<EOF
+{
+  "BACKEND_URL": "${BACKEND_URL}",
+  "AUTH_URL": "${AUTH_URL}"
+}
+EOF
+
+echo "Configuration generated at /app/apps/picture/apps/web/build/client/config.json"
+cat /app/apps/picture/apps/web/build/client/config.json
+
+# Remove pre-compressed versions (SvelteKit serves these instead of the raw file)
+rm -f /app/apps/picture/apps/web/build/client/config.json.br
+rm -f /app/apps/picture/apps/web/build/client/config.json.gz
+echo "Removed stale pre-compressed config files"
+
+echo "Starting Picture web app..."
+exec "$@"