[Feature] Containerize Tencent Web deployment

[JunchenMeteor]

Summary

• build a non-root Next.js standalone image on GitHub-hosted runners and publish immutable SHA tags to GHCR
• deploy preview and production with isolated Compose projects while preserving existing localhost ports
• validate the first migration through a shadow container and automatically restore PM2 on failure
• keep the private Local Agent outside the public Web image and expose a public process-local health endpoint
• add log rotation, memory limits, rollback behavior, and matching bilingual GHCR runbooks

Test Plan

• bash -n deploy/deploy-container.sh
• YAML parse for Compose and GitHub Actions
• cd apps/web && npm run lint && npm run build
• standalone server /api/health smoke check
• Agent compile check; full Agent pytest runs in CI Python 3.12
• Docker image build in this PR
• shadow and public-preview checks during Tencent migration

Closes #129

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
meteortest	Ready	Preview, Comment	Jul 11, 2026 5:12pm