Fase 0: scaffold monorepo, SvelteKit skeleton, and dev infrastructure

- Turborepo + pnpm workspaces with apps/web and packages/types
- SvelteKit app: Tailwind, Paraglide i18n (en/es), keycloak-js, Supabase client,
  auth/collective stores, PWA service worker skeleton, all route placeholders
- packages/types: domain types (User, Collective, ShoppingList, etc.) and
  database.ts placeholder for generated types
- Justfile with dev, db-*, kc-*, build, backup, restore, deploy recipes
- infra/docker-compose.dev.yml: Postgres 15, GoTrue, PostgREST, Realtime v2.83,
  Storage, Kong (port 8001), Studio, Keycloak 24
- infra/docker-compose.prod.yml, kong.yml, db-init scripts, backup/deploy scripts
- keycloak/realm-export.json with colectivo realm and 5 dev test users
- supabase/config.toml and seed.sql with sample collective and items
- GitHub Actions: ci.yml (lint+typecheck+build) and deploy.yml (GHCR + SSH)
- .env.example documenting all required variables
- Fixed docker-compose issues: Studio image tag, Kong port conflict (8001),
  internal role passwords init script, Realtime METRICS_JWT_SECRET/APP_NAME

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Justfile

@@ -0,0 +1,100 @@
+# Colectivo — task runner
+# Requires: just, docker, pnpm
+
+set dotenv-load := true
+
+# Alias: docker compose with correct project root so .env is always found
+dc_dev := "docker compose --env-file .env -f infra/docker-compose.dev.yml"
+dc_prod := "docker compose --env-file .env -f infra/docker-compose.prod.yml"
+
+# ── Dev ───────────────────────────────────────────────────────────────────────
+
+# Start full local stack (Docker services + SvelteKit dev server)
+dev:
+    {{dc_dev}} up -d
+    pnpm --filter @colectivo/web dev
+
+# Stop local Docker stack
+dev-stop:
+    {{dc_dev}} down
+
+# Stop and remove all volumes (full reset)
+dev-clean:
+    {{dc_dev}} down -v
+
+# ── Database ──────────────────────────────────────────────────────────────────
+
+# Drop, migrate, and seed the dev database
+db-reset:
+    supabase db reset
+
+# Apply pending migrations
+db-migrate:
+    supabase db push
+
+# Apply dev seed data
+db-seed:
+    docker exec -i colectivo-dev-db-1 psql -U postgres < supabase/seed.sql
+
+# Regenerate TypeScript types from Supabase schema
+db-types:
+    supabase gen types typescript --local > packages/types/src/database.ts
+    echo "Types written to packages/types/src/database.ts"
+
+# Open Supabase Studio
+db-open:
+    open http://localhost:54323
+
+# ── Keycloak ──────────────────────────────────────────────────────────────────
+
+# Export Keycloak realm to keycloak/realm-export.json
+kc-export:
+    {{dc_dev}} exec keycloak \
+        /opt/keycloak/bin/kc.sh export \
+        --realm colectivo \
+        --users realm_file \
+        --file /tmp/realm-export.json
+    {{dc_dev}} cp keycloak:/tmp/realm-export.json keycloak/realm-export.json
+    echo "Exported to keycloak/realm-export.json"
+
+# Open Keycloak Admin Console
+kc-open:
+    open http://localhost:8080/admin
+
+# ── Build ─────────────────────────────────────────────────────────────────────
+
+# Build all packages
+build:
+    pnpm turbo run build
+
+# Type-check all packages
+check:
+    pnpm turbo run check
+
+# Lint all packages
+lint:
+    pnpm turbo run lint
+
+# Run tests
+test:
+    pnpm turbo run test
+
+# ── Backup & Restore ──────────────────────────────────────────────────────────
+
+# Take a manual backup of a service (e.g. just backup supabase)
+backup service:
+    infra/scripts/backup.sh {{service}}
+
+# Restore a backup file (e.g. just restore supabase backups/2024-01-01.dump)
+restore service file:
+    infra/scripts/restore.sh {{service}} {{file}}
+
+# ── Production ────────────────────────────────────────────────────────────────
+
+# Deploy to production via SSH
+deploy:
+    infra/scripts/deploy.sh
+
+# Stream production Docker logs
+logs:
+    {{dc_prod}} logs -f