feat: add Dockerfile and .dockerignore for k8s deployment
uv-based multi-stage build on python:3.12-slim, non-root, runs uvicorn on port 20720. Single process per container; scale via k8s replicas.
Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com