fix(issue-9): No Dockerfile to build service

Dockerfile

@@ -0,0 +1,55 @@
+# syntax=docker/dockerfile:1
+
+# ---- Build stage ----
+FROM golang:1.26-alpine AS builder
+
+ENV CGO_ENABLED=0 GOOS=linux
+
+ARG VERSION=docker
+ARG COMMIT=docker
+ARG BUILD_TIME=unknown
+ARG PROJECT=git.loyso.art/frx/kurious
+
+WORKDIR /src
+
+# Cache module downloads.
+COPY go.mod go.sum ./
+RUN go mod download
+
+# Copy the rest of the source.
+# Generated files (templ *_templ.go, mockery mocks) are committed, so no
+# generation step is required here.
+COPY . .
+
+# Build the web server and the healthcheck probe.
+RUN go build -trimpath \
+        -ldflags "-X ${PROJECT}.version=${VERSION} -X ${PROJECT}.commit=${COMMIT} -X ${PROJECT}.buildTime=${BUILD_TIME}" \
+        -o /out/kuriweb ./cmd/kuriweb \
+    && go build -trimpath -o /out/healthcheck ./cmd/healthcheck
+
+# Bake a default config into the image (config files are gitignored locally,
+# so the image must be self-contained).
+RUN echo '{"log":{"level":"info","format":"json"},"http":{"listen_addr":":8080","mount_live":false},"sqlite":{"dsn":"/tmp/kurious.sqlite","shutdown_timeout":"10s"},"db_engine":"sqlite","tracing":{"type":"stdout","show_metrics":false}}' > /out/config.json
+
+# ---- Final stage ----
+FROM gcr.io/distroless/static-debian12
+
+LABEL org.opencontainers.image.title="kuriousweb" \
+      org.opencontainers.image.source="git.loyso.art/frx/kurious"
+
+COPY --from=builder /out/kuriweb     /kuriweb
+COPY --from=builder /out/healthcheck /healthcheck
+COPY --from=builder /out/config.json /etc/kurious/config.json
+
+# static-debian12 ships a "nonroot" user (uid 65532).
+USER nonroot:nonroot
+
+EXPOSE 8080
+
+ENTRYPOINT ["/kuriweb"]
+CMD ["/etc/kurious/config.json"]
+
+# Distroless static has no shell/curl, so probing is done via the tiny
+# healthcheck binary built above.
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD ["/healthcheck", "http://127.0.0.1:8080/healthz"]