feat: implement docker infrastructure (US-001)

- Add docker-compose.yml with postgres, redis, api, and web services
- Add multi-stage Dockerfile for API (Python 3.11)
- Add multi-stage Dockerfile for web (Node.js 20 + nginx)
- Add Makefile with common development commands
- Add .env.example with all required environment variables
- Add placeholder pyproject.toml and package.json for builds
- Configure health checks for all services
- Setup persistent volumes for postgres, redis, and repos
- Run services as non-root users

openspec/specs/tool-types/spec.md

@@ -0,0 +1,67 @@
+# Tool Type Definition Specification
+
+## Purpose
+
+Define and register tool types using Docker Compose templates for launching development tools.
+
+## Requirements
+
+### Requirement: Tool Type Model
+
+The system SHALL store tool type definitions in the database.
+
+#### Scenario: Create tool type
+- GIVEN an admin user
+- WHEN they define a new tool type
+- THEN the following fields are stored:
+  - name: Tool identifier
+  - description: Human-readable description
+  - docker_compose_template: Compose file template
+  - icon: Visual identifier
+  - category: Tool category
+  - default_env_vars: Default environment variables
+  - default_ports: Exposed ports
+
+### Requirement: Template Variables
+
+The system SHALL support template variable substitution.
+
+#### Scenario: Variable substitution
+- GIVEN a Docker Compose template
+- WHEN it's rendered for a tool instance
+- THEN these variables are substituted:
+  - `{{REPO_PATH}}`: Path to the git repository
+  - `{{WORKSPACE_DIR}}`: Working directory inside container
+  - `{{USER_ID}}`: User identifier
+  - `{{PROJECT_ID}}`: Project identifier
+  - `{{TOOL_ID}}`: Tool instance identifier
+
+### Requirement: Built-in Tools
+
+The system SHALL include default tool types.
+
+#### Scenario: Built-in tools
+- GIVEN a fresh installation
+- THEN these tool types are pre-configured:
+  - code-server: VS Code in browser
+  - jupyter-notebook: Jupyter notebooks
+  - opencode: OpenCode agent environment
+
+### Requirement: Template Validation
+
+The system SHALL validate Docker Compose templates.
+
+#### Scenario: Invalid template
+- GIVEN an invalid Docker Compose template
+- WHEN a user tries to create/update a tool type
+- THEN the system rejects with validation errors
+
+## Dependencies
+
+- Database models: ToolType
+
+## Quality Gates
+
+- `pytest` must pass
+- `mypy .` must pass
+- `ruff check .` must pass