Migrate CI to single-step DinD with Fabio/Consul

Replace 5-step pipeline (build/test/push/push/deploy) with single
docker:dind step that builds and deploys in-place via Docker socket.

- .woodpecker.yml: single-step DinD, 1 secret (SECRET_KEY)
- docker-compose.fabio.yml: overlay with SERVICE_* labels for Registrator
- docker-compose.yml: add ports without host bind (Fabio/Traefik routing)
- docker-compose.dev.yml: named volumes with bind driver
- Dockerfiles: install curl, HEALTHCHECK via curl /api/health
- Makefile: docker-fabio, consul-services, fabio-routes targets

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker/docker-compose.yml

@@ -11,6 +11,8 @@ services:
       SECRET_KEY: ${SECRET_KEY}
       DEBUG: "false"
       CORS_ORIGINS: '["https://${DOMAIN:-sejeteralo.org}"]'
+    ports:
+      - 8000
     volumes:
       - backend-data:/app
     restart: always
@@ -29,6 +31,8 @@ services:
     environment:
       NODE_ENV: production
       NUXT_PUBLIC_API_BASE: http://backend:8000/api/v1
+    ports:
+      - 3000
     depends_on:
       - backend
     restart: always