chore(deps): 统一依赖管理 - pnpm 11 + node:22 + golang:1.25 + python:3.12 + shared-* 集中化

- Node.js 统一到 node:22-alpine，Go 统一到 golang:1.25-alpine，Python 统一到 python:3.12-slim

- pnpm 升级到 11.13.0（corepack），新增 allowBuilds 白名单解决 ERR_PNPM_IGNORED_BUILDS

- 新增 packages/shared-py 集中 Python 共享依赖，shared-ts 补充 graphql-yoga/prom-client

- api-gateway 修复 go.mod 的 shared-go 依赖 + Dockerfile 改用 repo 根作 context

- Python 服务（data-ana/ai）Dockerfile 改用 repo 根作 context + 声明 uv workspace sources

- 16 个服务的 Dockerfile + CI + docker-compose.tools.yml 全部对齐版本矩阵

- known-issues.md 沉淀 9 条 pnpm 11 / uv workspace / Go shared-go 迁移经验

- 验证：4 服务完全成功（api-gateway /healthz 200），其余 install 成功（build 失败为预存 TS 错误）

services/msg/Dockerfile

@@ -1,19 +1,57 @@
 # Build stage
-FROM node:20-alpine AS builder
+FROM node:22-alpine AS builder
 WORKDIR /app
-RUN npm install -g pnpm
-COPY package.json pnpm-lock.yaml* ./
-RUN pnpm install --frozen-lockfile
-COPY tsconfig.json nest-cli.json ./
-COPY src ./src
+RUN corepack enable && corepack prepare pnpm@11.13.0 --activate
+
+# 复制 workspace 配置 + tsconfig 基线
+COPY package.json pnpm-lock.yaml* pnpm-workspace.yaml tsconfig.base.json ./
+
+# 复制 shared-proto（gRPC proto-loader 运行时加载）
+COPY packages/shared-proto ./packages/shared-proto
+
+# 复制 shared-ts（workspace 依赖）
+COPY packages/shared-ts ./packages/shared-ts
+
+# 复制 msg 源码
+COPY services/msg ./services/msg
+
+# HUSKY=0 跳过根 package.json 的 prepare:husky 脚本
+ENV HUSKY=0
+
+# 从根目录安装全部 workspace 依赖
+RUN pnpm install --no-frozen-lockfile --ignore-scripts
+
+# 构建 shared-ts（若 msg 依赖 @edu/shared-ts dist 产物）
+RUN cd packages/shared-ts && pnpm build
+
+# 构建 msg
+WORKDIR /app/services/msg
 RUN pnpm build
 
+# 剪枝 devDependencies
+RUN cd /app/services/msg && pnpm prune --prod
+
 # Runtime stage
-FROM node:20-alpine
+FROM node:22-alpine
 WORKDIR /app
-RUN npm install -g pnpm
-COPY package.json pnpm-lock.yaml* ./
-RUN pnpm install --prod --frozen-lockfile
-COPY --from=builder /app/dist ./dist
-EXPOSE 3007
-CMD ["node", "dist/main.js"]
+
+# 复制 workspace 配置 + tsconfig 基线
+COPY package.json pnpm-lock.yaml* pnpm-workspace.yaml tsconfig.base.json ./
+
+# 复制 shared-proto + shared-ts（运行时需要：proto 文件 + shared-ts dist）
+COPY packages/shared-proto ./packages/shared-proto
+COPY packages/shared-ts ./packages/shared-ts
+
+# 复制 msg 源码
+COPY services/msg ./services/msg
+
+# 从 builder 复制已编译的 prod node_modules + msg dist + shared-ts dist
+COPY --from=builder /app/services/msg/node_modules ./services/msg/node_modules
+COPY --from=builder /app/packages/shared-ts/node_modules ./packages/shared-ts/node_modules
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/services/msg/dist ./services/msg/dist
+COPY --from=builder /app/packages/shared-ts/dist ./packages/shared-ts/dist
+
+WORKDIR /app/services/msg
+EXPOSE 3007 50056
+CMD ["node", "dist/main.js"]

services/msg/package.json

@@ -22,14 +22,14 @@
     "drizzle-orm": "^0.31.0",
     "grpc-reflection-js": "^0.3.0",
     "ioredis": "^5.4.0",
-    "kafkajs": "^2.2.0",
+    "kafkajs": "^2.2.4",
     "mysql2": "^3.11.0",
     "prom-client": "^15.1.0",
     "pino": "^9.4.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.0",
     "zod": "^3.23.0",
-    "@grpc/grpc-js": "^1.11.0",
+    "@grpc/grpc-js": "^1.12.0",
     "@grpc/proto-loader": "^0.7.13",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/sdk-node": "^0.55.0",