feat(dev): add local full-stack dev launcher

[simonjcarr]

Summary

• add ./dev-stack.sh for a local full-stack CT-Ops development environment
• run web, ingest, Postgres, Password Manager, and nginx proxy with isolated local config/volumes
• document the workflow and add static checks for the dev-stack wiring
• fix the inline theme nonce hydration warning exposed by local Next dev

Validation

• bash -n dev-stack.sh
• bash deploy/scripts/test-dev-stack.sh
• ./dev-stack.sh --check
• go test ./internal/config from apps/ingest
• docker compose --project-name ct-ops-dev --env-file .dev/dev.env -f docker-compose.dev-stack.yml exec -T web-dev /bin/sh -lc 'cd apps/web && pnpm exec tsc --noEmit --pretty false'

Notes

• Local generated config is kept out of git: .dev/dev.env and apps/web/.env.local.
• The release/test-server path remains separate from this local dev stack.