Move to infisical. Create local dev environment. Add ci gates. Modernize repo

docker/Dockerfile

@@ -1,24 +1,49 @@
 # syntax=docker/dockerfile:1
-FROM oven/bun:alpine AS base
+FROM docker.io/oven/bun:1.3.10-alpine AS base
 
 # Builder stage
 FROM base AS builder
 RUN apk add --no-cache libc6-compat
 WORKDIR /app
 
+ARG SENTRY_AUTH_TOKEN
+ARG SENTRY_DISABLE_AUTO_UPLOAD=false
+ARG NEXT_PUBLIC_SITE_URL
+ARG NEXT_PUBLIC_CONVEX_URL
+ARG NEXT_PUBLIC_PLAUSIBLE_URL
+ARG NEXT_PUBLIC_SENTRY_DSN
+ARG NEXT_PUBLIC_SENTRY_URL
+ARG NEXT_PUBLIC_SENTRY_ORG
+ARG NEXT_PUBLIC_SENTRY_PROJECT_NAME
+ARG PAYLOAD_SECRET
+ARG PAYLOAD_DB_URL
+
+ENV SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
+ENV SENTRY_DISABLE_AUTO_UPLOAD=$SENTRY_DISABLE_AUTO_UPLOAD
+ENV NEXT_PUBLIC_SITE_URL=$NEXT_PUBLIC_SITE_URL
+ENV NEXT_PUBLIC_CONVEX_URL=$NEXT_PUBLIC_CONVEX_URL
+ENV NEXT_PUBLIC_PLAUSIBLE_URL=$NEXT_PUBLIC_PLAUSIBLE_URL
+ENV NEXT_PUBLIC_SENTRY_DSN=$NEXT_PUBLIC_SENTRY_DSN
+ENV NEXT_PUBLIC_SENTRY_URL=$NEXT_PUBLIC_SENTRY_URL
+ENV NEXT_PUBLIC_SENTRY_ORG=$NEXT_PUBLIC_SENTRY_ORG
+ENV NEXT_PUBLIC_SENTRY_PROJECT_NAME=$NEXT_PUBLIC_SENTRY_PROJECT_NAME
+ENV PAYLOAD_SECRET=$PAYLOAD_SECRET
+ENV PAYLOAD_DB_URL=$PAYLOAD_DB_URL
+
 # Copy source code (node_modules excluded via .dockerignore)
 COPY . .
 
 # Install all dependencies
-RUN bun install
+ENV HUSKY=0
+RUN bun install --frozen-lockfile
 
 # Build with proper environment
 ENV NEXT_TELEMETRY_DISABLED=1
 ENV NODE_ENV=production
-RUN bun run build --filter=@gib/next
+RUN cd apps/next && bun run build:docker
 
 # Runner stage
-FROM node:22-alpine AS runner
+FROM docker.io/library/node:22-alpine AS runner
 WORKDIR /app
 
 ENV NODE_ENV=production