fix: make docker compose build pass from fresh clone

[sosoihd]

What this fixes

This PR fixes docker compose build failures from a clean checkout.

Root causes

1. .dockerignore excluded pnpm-lock.yaml, but Dockerfile requires it in COPY commands.
2. Dockerfile used pnpm@latest, which now resolves to v11 and breaks install in this repo with ERR_PNPM_IGNORED_BUILDS.

Changes

• Remove pnpm-lock.yaml from .dockerignore
• Pin pnpm in Dockerfile to 10.33.0 in both stages
• Copy .npmrc into builder and runtime stages so pnpm settings are consistently applied

Validation

• docker compose build --no-cache succeeds locally
• docker compose up -d starts both services successfully

Closes #59