Migrate CI to single-step DinD with Fabio/Consul

Replace 5-step pipeline (build/test/push/push/deploy) with single
docker:dind step that builds and deploys in-place via Docker socket.

- .woodpecker.yml: single-step DinD, 1 secret (SECRET_KEY)
- docker-compose.fabio.yml: overlay with SERVICE_* labels for Registrator
- docker-compose.yml: add ports without host bind (Fabio/Traefik routing)
- docker-compose.dev.yml: named volumes with bind driver
- Dockerfiles: install curl, HEALTHCHECK via curl /api/health
- Makefile: docker-fabio, consul-services, fabio-routes targets

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker/docker-compose.dev.yml

@@ -10,8 +10,7 @@ services:
     ports: !override
       - "8000:8000"
     volumes:
-      - ../backend:/app
-    labels: []
+      - backend-sources:/app
 
   frontend:
     build:
@@ -22,5 +21,18 @@ services:
       - "3000:3000"
       - "24678:24678"
     volumes:
-      - ../frontend:/app
-    labels: []
+      - frontend-sources:/app
+
+volumes:
+  backend-sources:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: ../backend
+  frontend-sources:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: ../frontend