fix: build Vite assets in app container, harden docker deploy

App (PHP-FPM) container never got public/build/manifest.json, only
the nginx container built it — blade's @vite runs server-side in PHP
and threw "Vite manifest not found", causing 500 on every page.

Also:
- strip docker/ (incl. DB dump) from the shipped app image
- pin npm installs to package-lock.json via npm ci in both build stages
- fix .dockerignore case typo (Docker/Dockerfile -> docker/Dockerfile)
- pass AWS_* env vars to app service, required since FILESYSTEM_DISK=s3

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docker/Dockerfile

@@ -1,3 +1,10 @@
+FROM node:20-alpine AS node-builder
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm ci --ignore-scripts
+COPY . .
+RUN npm run build:icons && npm run build
+
 FROM composer:2.8 AS php-builder
 WORKDIR /app
 COPY composer*.json ./
@@ -28,6 +35,9 @@ RUN apk add --no-cache \
 COPY docker/opcache.ini /usr/local/etc/php/conf.d/opcache.ini
 
 COPY --from=php-builder /app /var/www/html
+COPY --from=node-builder /app/public/build /var/www/html/public/build
+
+RUN rm -rf /var/www/html/docker
 
 RUN ln -sf ../../storage/app/public /var/www/html/public/storage
 

docker/nginx.Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-alpine AS node-builder
 WORKDIR /app
-COPY package.json ./
-RUN npm install --ignore-scripts
+COPY package.json package-lock.json ./
+RUN npm ci --ignore-scripts
 COPY . .
 RUN npm run build:icons && npm run build