feat: ship phase 1 surface area (v0.2.0)

- primora CLI + @primora/mcp server over generated client
- auth users admin panel, mobile bottom nav
- release workflow: GHCR images, compiled binaries, npm tarballs
- fix gzip Content-Length truncation, nginx upstream re-resolution

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

apps/backend/Dockerfile

@@ -1,16 +1,14 @@
-FROM golang:1.24-alpine AS builder
+FROM golang:1.26-alpine AS builder
 WORKDIR /app
 
-RUN apk add --no-cache git build-base
-
-# Copy root configs for workspace context
-COPY go.mod go.sum ./
-COPY apps/backend ./apps/backend
+RUN apk add --no-cache git
 
+# Backend Go module lives in apps/backend
+COPY apps/backend/go.mod apps/backend/go.sum ./
 RUN go mod download
 
-WORKDIR /app/apps/backend
-RUN go build -o /primora-backend ./cmd/server
+COPY apps/backend ./
+RUN CGO_ENABLED=0 go build -o /primora-backend ./cmd/server
 
 FROM alpine:3.21
 WORKDIR /app
@@ -18,8 +16,8 @@ WORKDIR /app
 RUN apk add --no-cache ca-certificates
 
 COPY --from=builder /primora-backend /usr/local/bin/primora-backend
-COPY --from=builder /app/apps/backend/db ./db
-COPY --from=builder /app/apps/backend/openapi ./openapi
+COPY --from=builder /app/db ./db
+COPY --from=builder /app/openapi ./openapi
 
 EXPOSE 8080
 

apps/backend/internal/middleware/compression.go

@@ -22,6 +22,9 @@ type gzipWriter struct {
 }
 
 func (g *gzipWriter) Write(data []byte) (int, error) {
+	// Compressed output never matches a Content-Length set by a handler —
+	// drop it so net/http falls back to chunked encoding.
+	g.Header().Del("Content-Length")
 	return g.writer.Write(data)
 }