chore(deps): 统一依赖管理 - pnpm 11 + node:22 + golang:1.25 + python:3.12 + shared-* 集中化

- Node.js 统一到 node:22-alpine，Go 统一到 golang:1.25-alpine，Python 统一到 python:3.12-slim

- pnpm 升级到 11.13.0（corepack），新增 allowBuilds 白名单解决 ERR_PNPM_IGNORED_BUILDS

- 新增 packages/shared-py 集中 Python 共享依赖，shared-ts 补充 graphql-yoga/prom-client

- api-gateway 修复 go.mod 的 shared-go 依赖 + Dockerfile 改用 repo 根作 context

- Python 服务（data-ana/ai）Dockerfile 改用 repo 根作 context + 声明 uv workspace sources

- 16 个服务的 Dockerfile + CI + docker-compose.tools.yml 全部对齐版本矩阵

- known-issues.md 沉淀 9 条 pnpm 11 / uv workspace / Go shared-go 迁移经验

- 验证：4 服务完全成功（api-gateway /healthz 200），其余 install 成功（build 失败为预存 TS 错误）

services/student-bff/Dockerfile

@@ -1,7 +1,7 @@
 # Build stage (coord-final-decisions G1: 多阶段构建首次实现即用)
 FROM node:22-alpine AS builder
 WORKDIR /app
-RUN npm install -g pnpm
+RUN corepack enable && corepack prepare pnpm@11.13.0 --activate
 COPY package.json pnpm-lock.yaml* ./
 # 复制 workspace 配置以解析 @edu/shared-ts 依赖
 COPY pnpm-workspace.yaml ./
@@ -15,7 +15,7 @@ RUN pnpm run build
 # Runtime stage
 FROM node:22-alpine
 WORKDIR /app
-RUN npm install -g pnpm
+RUN corepack enable && corepack prepare pnpm@11.13.0 --activate
 COPY package.json pnpm-lock.yaml* ./
 COPY pnpm-workspace.yaml ./
 COPY packages/shared-ts ./packages/shared-ts

services/student-bff/package.json

@@ -23,7 +23,7 @@
     "graphql": "^16.9.0",
     "graphql-yoga": "^5.7.0",
     "ioredis": "^5.4.1",
-    "kafkajs": "^2.2.0",
+    "kafkajs": "^2.2.4",
     "opossum": "^8.4.0",
     "pino": "^9.4.0",
     "prom-client": "^15.1.0",