feat. rebuild service in Go

Rebuild the Gitea Codex review bot from the product contract with a Go HTTP service, durable SQL queue, typed Gitea client, isolated runner, and deployment updates.

Co-Authored-By: Claude <noreply@anthropic.com>

docker-compose.yml

@@ -1,5 +1,5 @@
 services:
-  mariadb: # Uncomment this block to run a local MariaDB instance.
+  mariadb:
     image: mariadb:11
     restart: unless-stopped
     environment:
@@ -18,7 +18,7 @@ services:
       retries: 20
 
   bot:
-    image: gitea.reversed.dev/space/gitea-codex:latest
+    build: .
     depends_on:
       mariadb:
         condition: service_healthy
@@ -26,7 +26,8 @@ services:
       - .env
     volumes:
       - ./worktrees:/var/lib/gitea-codex/worktrees
-      - ~/.codex/auth.json:/root/.codex/auth.json:ro # Comment this out if you are not using ChatGPT Auth
-      - //var/run/docker.sock:/var/run/docker.sock
+      - ~/.codex/auth.json:/root/.codex/auth.json:ro
+      # The bot needs the host Docker API to launch isolated review containers.
+      - /var/run/docker.sock:/var/run/docker.sock
     ports:
       - "8000:8000"