chore(infra): docker dev-apps stack + apollo-router v1.45 compat

- 新增 docker-compose.dev-apps.yml：7 个应用服务容器化
  （iam/classes/core-edu/content/msg/push-gateway/api-gateway）
  + apollo-router override
- 新增 apollo-router dev-apps-entrypoint.sh / dev-apps-supergraph.yaml
  仅等待 5 个子图（iam/core-edu/content/msg/config-service）
  避免等待未启动的 ai/data-ana
- router.yaml：移除 v1.45 不兼容键
  （require_manifest/manifest_path/max_cost/max_batch_size）
  移除 ELv2 受限特性（persisted_queries/limits.max_depth）
  自托管无 GraphOS license
- docker-compose.yml：config-service 添加 NODE_ENV=production
  修复 pino-pretty devDep 误用
  apollo-router 添加 APOLLO_PERSISTED_QUERIES env
- services/{classes,core-edu,content,config-service}/Dockerfile
  重写为 repo 根 context + shared-ts/shared-proto 工作区依赖
  + --ignore-scripts
  修复 ERR_PNPM_WORKSPACE_PKG_NOT_FOUND 与 ERR_PNPM_IGNORED_BUILDS
- api-gateway healthcheck：wget --spider 改为 wget -O /dev/null
  修复 busybox 对 200+body 误报 exit 8

services/classes/Dockerfile

@@ -1,22 +1,55 @@
 # Build stage
+# 构建上下文必须是仓库根目录（需访问 packages/shared-ts 与 pnpm-workspace.yaml）
 FROM node:22-alpine AS builder
 WORKDIR /app
 RUN corepack enable && corepack prepare pnpm@11.13.0 --activate
-COPY package.json pnpm-lock.yaml* ./
-# pnpm 11 默认拒绝 build scripts，独立安装时无法读取 workspace 的 allowBuilds 配置
-# 使用 --ignore-scripts 跳过（@nestjs/core/protobufjs 的 postinstall 非功能必需）
-# --no-frozen-lockfile：services/classes/ 无独立 pnpm-lock.yaml
-RUN pnpm install --no-frozen-lockfile --ignore-scripts
-COPY tsconfig.json nest-cli.json ./
-COPY src ./src
+
+# 复制 workspace 配置 + tsconfig 基线
+COPY package.json pnpm-lock.yaml* pnpm-workspace.yaml tsconfig.base.json ./
+
+# 复制 shared-proto（gRPC proto-loader 运行时加载）
+COPY packages/shared-proto ./packages/shared-proto
+
+# 复制 shared-ts（workspace 依赖）
+COPY packages/shared-ts ./packages/shared-ts
+
+# 复制 classes 源码
+COPY services/classes ./services/classes
+
+# HUSKY=0 跳过根 package.json 的 prepare:husky 脚本
+ENV HUSKY=0
+
+# 只安装 classes 及其 workspace 依赖（@edu/shared-ts、@edu/shared-proto）
+RUN pnpm install --no-frozen-lockfile --filter @edu/classes-service...
+
+# 构建 shared-ts（classes 依赖 @edu/shared-ts dist 产物）
+RUN cd packages/shared-ts && pnpm build
+
+# 构建 classes
+WORKDIR /app/services/classes
 RUN pnpm build
 
 # Runtime stage
 FROM node:22-alpine
 WORKDIR /app
-RUN corepack enable && corepack prepare pnpm@11.13.0 --activate
-COPY package.json pnpm-lock.yaml* ./
-RUN pnpm install --prod --no-frozen-lockfile --ignore-scripts
-COPY --from=builder /app/dist ./dist
+
+# 复制 workspace 配置 + tsconfig 基线
+COPY package.json pnpm-lock.yaml* pnpm-workspace.yaml tsconfig.base.json ./
+
+# 复制 shared-proto + shared-ts（运行时需要：proto 文件 + shared-ts dist）
+COPY packages/shared-proto ./packages/shared-proto
+COPY packages/shared-ts ./packages/shared-ts
+
+# 复制 classes 源码
+COPY services/classes ./services/classes
+
+# 从 builder 复制已编译的 prod node_modules + classes dist + shared-ts dist
+COPY --from=builder /app/services/classes/node_modules ./services/classes/node_modules
+COPY --from=builder /app/packages/shared-ts/node_modules ./packages/shared-ts/node_modules
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/services/classes/dist ./services/classes/dist
+COPY --from=builder /app/packages/shared-ts/dist ./packages/shared-ts/dist
+
+WORKDIR /app/services/classes
 EXPOSE 3001
 CMD ["node", "dist/main.js"]