feat(deploy): docker images, compose, roles SQL, local workspace

- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml

.dockerignore

@@ -0,0 +1,17 @@
+# build artefacts & deps
+**/node_modules
+**/.venv
+**/__pycache__
+**/.pytest_cache
+**/dist
+**/*.pyc
+harness/.env
+harness/workspaces/psd.yaml
+deploy/thothii.env
+.git
+.gitignore
+**/*.log
+**/.DS_Store
+tht-workspace-psd
+# docs/site (mkdocs build) — non necessari nelle immagini
+docs/superpowers/plans