feat(platform): I1 bootstrap, I2 M1 APIs, OpenAPI SSOT, and CI guards

Deliver dual Spring Boot services (platform API + webhook ingress), JWT
auth, Flyway with isolated history tables, customer/project/dictionary
endpoints, OpenAPI snapshot under contracts/, RUNBOOK, and CI that runs
on services/web/contracts paths plus enforcer + dependency tree ban on
craftlabs-auth-bitanswer.

Made-with: Cursor

services/docker-compose.yml

@@ -0,0 +1,10 @@
+# 本地/联调：PostgreSQL 15（与架构文档一致）
+services:
+  postgres:
+    image: postgres:15-alpine
+    environment:
+      POSTGRES_USER: craftlabs
+      POSTGRES_PASSWORD: craftlabs
+      POSTGRES_DB: craftlabs_platform
+    ports:
+      - "5432:5432"