feat(server): initial implementation

This commit captures the full server code accumulated across
several development sessions. It includes the following layers,
applied in roughly this order during development:

1. Base infrastructure
   - cmd/poc-server HTTP+WebSocket server, /health, /stats
   - internal/transport wire types (Envelope + all message types)
   - internal/catalog, internal/realtime, internal/stats
   - internal/storage/postgres with migrations 001-004
   - .env, .env.example, docker-compose, Dockerfile, scripts/

2. Swagger documentation
   - go get github.com/swaggo/http-swagger
   - swag init produces docs/docs.go
   - /swagger/index.html UI, /swagger/doc.json spec
   - annotations on health/stats/ws and catalog handlers

3. Races API
   - internal/races/{store,service,keyset,types}.go
   - migration 005_races.sql: finished_races, race_plans, race_queue
   - GET /api/races with keyset pagination, status filter
   - GET /api/races/upcoming
   - POST /api/races/queue/join, GET, DELETE
   - POST/GET /api/races/plans, DELETE /{id}
   - lobby.RaceMeta simplification (no host_id/host_name)

4. Races seeder
   - internal/races/seed with deterministic generator
   - --seed-races / --reset CLI flags in main.go
   - 30 finished + 5 live + 5 plans + 4 queue entries

5. Drivers and clans
   - internal/drivers, internal/clans (CRUD, validation)
   - migration 008_drivers_clans.sql
   - /api/clans and /api/drivers endpoints
   - 3-letter uppercase nickname/tag validation
   - lobby.DriverMeta: Nickname, AvatarURL, ClanID, ClanTag

6. Podium
   - internal/transport.RacePodiumEntry
   - lobby.SetDriverProfile for in-memory metadata sync
   - migration 007_podium.sql (podium JSONB column)
   - seeder populates top-3 per finished race

7. Live races persistence
   - migration 009_live_persistence.sql: live_races,
     live_race_drivers, lobby_drivers
   - internal/races/live_store.go: LiveStore with write-side
     mirror for lobby.Service mutations
   - Service.collectLive and Upcoming read from Postgres
   - main.go RestoreFromDB rehydrates lobby on startup

8. Unify live + finished into one races table
   - migration 010_unify_races.sql: rename finished_races to
     races, expand status CHECK, merge live rows
   - PgStore now hosts both write paths; LiveStore is a
     thin facade implementing lobby.Persistence
   - seeder resetAll drops only finished/cancelled rows and
     race_plans / race_queue / lobby_drivers

Each layer is consistent on its own; cross-layer changes are
visible in the file history. A future refactor may split this
commit into the per-stage boundaries listed above.

server/Dockerfile

@@ -0,0 +1,34 @@
+# syntax=docker/dockerfile:1.7
+#
+# Multi-stage build for the x0gp api-gateway (and other Go services later).
+# Target: linux/arm64 (Orange Pi 5 Pro, Raspberry Pi 5) by default.
+#         Override with --build-arg GOARCH=amd64 for x86 dev boxes.
+#
+# Stage 1: build
+# Stage 2: minimal runtime on distroless base.
+
+ARG GO_VERSION=1.26
+ARG GOARCH=arm64
+
+FROM --platform=linux/$GOARCH golang:${GO_VERSION}-alpine AS build
+
+WORKDIR /src
+
+# Cache deps first.
+COPY go.mod go.sum* ./
+RUN go mod download
+
+# Build.
+COPY . .
+ARG CMD=poc-server
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=$GOARCH \
+    go build -ldflags="-s -w" -o /out/app ./cmd/${CMD}
+
+# Stage 2: runtime.
+FROM --platform=linux/$GOARCH gcr.io/distroless/static-debian12:nonroot AS runtime
+
+COPY --from=build /out/app /app
+
+USER nonroot:nonroot
+EXPOSE 8080
+ENTRYPOINT ["/app"]