chore: move docker/ compose files and infra to repo root

Moved compose.yml, compose.prod.yml, DEPLOY.md, traefik/, and cron/ out
of docker/ into the repo root (docker/ removed). Updated every reference:

- Dockerfile: COPY paths for the cron stage
- .dockerignore: dropped the now-unneeded docker/!docker-cron
  exclude+exception pair (cron/ is just a normal top-level dir now, no
  special-casing needed)
- compose.prod.yml: build context ".." -> "." (Dockerfile and compose
  files are now siblings, not one level apart)
- CLAUDE.md, DEPLOY.md, compose.yml, traefik/epicure.yml,
  cron/run-digest.sh, weekly-digest route.ts: path references in comments/
  docs

Verified: both compose files validate, and all three Dockerfile targets
(runner/cron/migrator) build clean via a local --no-cache docker build
from the new layout.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

traefik/epicure.yml

@@ -0,0 +1,24 @@
+# Traefik file-provider dynamic config.
+# Copy to traefik LXC's dynamic config dir (the one referenced by
+# providers.file.directory in traefik's static config), then edit
+# HOST_DOMAIN and PORTAINER_LXC_IP below.
+
+http:
+  routers:
+    epicure:
+      rule: "Host(`HOST_DOMAIN`)"
+      entryPoints:
+        - websecure
+      service: epicure
+      tls:
+        certResolver: letsencrypt # match whatever resolver name is set in your traefik static config
+
+  services:
+    epicure:
+      loadBalancer:
+        servers:
+          - url: "http://PORTAINER_LXC_IP:3000" # match WEB_PORT from compose.prod.yml env
+        healthCheck:
+          path: /
+          interval: 10s
+          timeout: 3s