feat: dockerize full stack (web + api + postgres)

- Multi-stage Dockerfiles for API (NestJS, prisma migrate on start) and web (Vite + nginx reverse proxy)
- docker-compose.yml orchestrating db/api/web with healthcheck and persistent volumes
- nginx proxies /api and /avatars to API; web built with relative API URL
- scripts/docker-up.sh: ExFAT-safe wrapper that strips macOS AppleDouble (._*) sidecars before build
- Conditionally register GoogleStrategy only when GOOGLE_CLIENT_ID is set
- Fix unused-variable TS errors blocking production build

apps/web/nginx.conf

@@ -0,0 +1,30 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Client upload body size (avatars, etc.)
+    client_max_body_size 10m;
+
+    # Proxy API calls to the api service (keeps /api prefix)
+    location /api/ {
+        proxy_pass http://api:3001;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # Proxy static uploads (avatars served by the API from /public)
+    location /avatars/ {
+        proxy_pass http://api:3001;
+        proxy_set_header Host $host;
+    }
+
+    # SPA fallback
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}