feat(dev): add compose files and dev-login bypass route

- compose.prod.yml: production stack with registry image, healthcheck,
  migration service
- compose.test.yml: local test stack with source mount and LOCAL=true
- routes/dev-login.ts: fake admin JWT login, only active when LOCAL=true
- routes/_middleware.ts: expose /dev-login as public route

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

routes/_middleware.ts

@@ -10,6 +10,7 @@ const PUBLIC_ROUTES = [
   "/about",
   "/partials/about",
   "/contact",
+  "/dev-login",
 ];
 
 const jwtKeyCache: Record<string, string> = {};