feat(FN-010): implement code-server spawn service with Docker Compose

- Add SpawnService with container lifecycle (spawn/stop/status)
- Generate Docker Compose services from tool manifests
- Integrate Traefik label generation with subdomain routing
- Mount workspace, config, and SSH key volumes
- Add container status polling and health checks
- Enhance tool instance API with spawn/stop/start/status endpoints
- Add Traefik forwardAuth middleware for auth proxy
- Update code-server manifest with runtime configuration

apps/api/app/tools/manifests/code-server.yml

@@ -3,6 +3,15 @@ name: code-server
 description: VS Code in the browser.
 version: "1.0.0"
 image: codercom/code-server:latest
+runtime_command:
+  - "--bind-addr"
+  - "0.0.0.0:8080"
+  - "--auth"
+  - "none"
+  - "--disable-telemetry"
+  - "--disable-update-check"
+runtime_entrypoint: []
+runtime_user: "coder"
 runtime_working_dir: /workspace
 ports:
   - container_port: 8080
@@ -19,11 +28,10 @@ config_mounts:
     source_pattern: "{user_config}/code-server"
     target: /home/coder/.config/code-server
     read_only: false
-env: {}
-secrets:
-  - name: code-server-password
-    env_var: PASSWORD
-    required: false
+env:
+  PASSWORD: ""
+  SUDO_PASSWORD: ""
+secrets: []
 health_check:
   type: http
   path: /healthz