chore: 重构 CI/CD 与 Docker 发布流程

将部署链路调整为 CI 构建推送镜像、服务器拉取镜像运行，并拆分/复用 Gitea workflow 与公共准备脚本；同时统一 APP_NAME 与端口变量配置，补充 Docker 与 ESLint 相关配置文件以提升可维护性。

Made-with: Cursor

.gitea/workflows/reusable-ci.yml

@@ -0,0 +1,51 @@
+name: Reusable CI
+
+on:
+  workflow_call:
+    inputs:
+      node_major:
+        description: "Node 主版本（例如 22）"
+        required: false
+        type: string
+        default: "22"
+      yarn_version:
+        description: "Yarn 版本（例如 stable 或 1.22.22）"
+        required: false
+        type: string
+        default: "stable"
+      run_lint:
+        description: "是否执行 yarn lint"
+        required: false
+        type: boolean
+        default: true
+      run_tsc:
+        description: "是否执行 yarn tsc --noEmit"
+        required: false
+        type: boolean
+        default: true
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    env:
+      NODE_MAJOR: ${{ inputs.node_major }}
+      YARN_VERSION: ${{ inputs.yarn_version }}
+    steps:
+      - name: Prepare workspace (checkout + node/yarn)
+        run: |
+          set -euo pipefail
+          chmod +x .gitea/scripts/prepare-workspace.sh
+          ./.gitea/scripts/prepare-workspace.sh \
+            "${{ github.server_url }}/${{ github.repository }}.git" \
+            "${{ github.sha }}"
+
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile
+
+      - name: Lint
+        if: ${{ inputs.run_lint }}
+        run: yarn lint
+
+      - name: TypeScript check
+        if: ${{ inputs.run_tsc }}
+        run: yarn tsc --noEmit