build(docker): 增加多阶段 Dockerfile 与编排配置，实现生产级无状态部署

Dockerfile

@@ -0,0 +1,37 @@
+# 阶段 1：安装依赖
+FROM node:18-alpine AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+COPY package.json package-lock.json* ./
+RUN npm ci
+
+# 阶段 2：构建产物
+FROM node:18-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+# 禁用 Next.js 遥测，并注入占位环境变量以通过编译
+ENV NEXT_TELEMETRY_DISABLED=1
+RUN npm run build
+
+# 阶段 3：生产运行环境
+FROM node:18-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# 安全降权运行
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+EXPOSE 8080
+# 确保 Next.js 监听所有网卡并在正确端口启动
+ENV PORT=8080
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "server.js"]