ci: перевести пайплайн на quality bake и alpine

Co-authored-by: Cursor <[email protected]>

README.md

@@ -52,14 +52,16 @@ pnpm dlx shadcn@latest add @reui/auth-13 --yes
 
 ## Docker / Gitea CI
 
-- Workflow: `.gitea/workflows/docker.yml` (как CFDM)
-- Secrets: `ACTIONS_PAT`, `GITEA_TOKEN`
-- Образ: `git.shx.one/denozord/auth-portal`
+- Workflows: `.gitea/workflows/{ci,cd,quality}.yaml` — как CFDM / EvoFW
+- Релизы: [`docs/releasing.md`](docs/releasing.md)
+- Secrets: `ACTIONS_PAT` (tags, releases, Container Registry)
+- Образы alpine all-in-one: `git.shx.one/denozord/authportal` и drop-in `git.shx.one/denozord/auth-portal`
+- Bake: [`deploy/docker`](deploy/docker) (`node:22-alpine`, без Python/g++ в runtime)
 
-Локально / без reverse proxy:
+Локально / без reverse proxy (нужен уже собранный образ или bake):
 
 ```bash
-docker compose up -d --build
+docker compose up -d
 ```
 
 **Production (один Compose: Traefik + auth-portal, HTTPS Cloudflare DNS challenge):**  
@@ -75,5 +77,6 @@ apps/api/src/          # Fastify
 packages/ui/           # shadcn CLI output
 packages/shared/       # contracts
 packages/db/           # drizzle schema
-.gitea/workflows/      # CI/CD
+.gitea/workflows/      # CI/CD (ci / cd / quality)
+deploy/docker/         # bake + alpine Dockerfile
 ```