feat: initial scaffold - backend, frontend, Prisma schema, Docker

- Prisma schema: User, Session, RepoConfig, Preview, Job, WebhookToken, NoConfigComment, AdminSettings
- Backend: auth (login/logout/me/first-user setup), webhook handler with HMAC verification, EC2 service, SSH service, deploy pipeline, job queue worker, cron workers
- Frontend: Login with first-user detection, Dashboard, PreviewDetail with live log streaming, Settings, Repos config, Admin panel, SetupWizard, Privacy page
- Docker Compose and Dockerfile for self-hosted deployment
- Uses bcryptjs for Node 24 compatibility

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -0,0 +1,43 @@
+version: "3.9"
+
+services:
+  pp-db:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: pp
+      POSTGRES_PASSWORD: pp_password
+      POSTGRES_DB: pp
+    volumes:
+      - pp_db_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U pp"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    ports:
+      - "5432:5432"
+
+  pp-backend:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      DATABASE_URL: postgresql://pp:pp_password@pp-db:5432/pp
+      PORT: 5000
+      SESSION_SECRET: ${SESSION_SECRET:?SESSION_SECRET is required}
+      PP_BASE_URL: ${PP_BASE_URL:?PP_BASE_URL is required}
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY:?ENCRYPTION_KEY is required}
+      LOG_LEVEL: info
+    depends_on:
+      pp-db:
+        condition: service_healthy
+    ports:
+      - "5000:5000"
+    volumes:
+      - ./prisma:/app/prisma
+
+volumes:
+  pp_db_data: