Add docker and gitlab pipelines.

Dockerfile

@@ -0,0 +1,32 @@
+# Build stage: install all deps (build needs onnxruntime-web files from
+# node_modules) and emit the self-contained dist/ (scripts/build.ts).
+FROM oven/bun:1 AS build
+WORKDIR /app
+
+COPY package.json bun.lock bunfig.toml ./
+RUN bun install --frozen-lockfile
+
+COPY src ./src
+COPY scripts ./scripts
+RUN bun run build
+
+# Runtime stage: production deps only. src/ and scripts/ are still needed —
+# src/index.ts is the server entrypoint and imports scripts/generate-icons.
+FROM oven/bun:1 AS runtime
+WORKDIR /app
+ENV NODE_ENV=production
+ENV DB_PATH=/app/data/app.db
+
+COPY package.json bun.lock bunfig.toml ./
+RUN bun install --frozen-lockfile --production
+
+COPY src ./src
+COPY scripts ./scripts
+COPY --from=build /app/dist ./dist
+
+# SQLite lives under /app/data — mount a volume there to persist users/sessions.
+RUN mkdir -p /app/data && chown -R bun:bun /app/data
+USER bun
+
+EXPOSE 3000
+CMD ["bun", "src/index.ts"]