build: align Dockerfile with packer build and add docker-compose dev mounts

- Rebase Dockerfile onto almalinux9-base, install via uv tool install
- Remove dev artifacts (remotes.yaml, ca-bundle.pem) from image
- Mount gitignored dev files via docker-compose volumes instead
- Add .dockerignore to keep secrets out of build context
- Add pre-commit hook to validate docker build on Dockerfile changes
- Track docker-compose.yml in git (no secrets; dev files mounted as volumes)

.pre-commit-config.yaml

@@ -11,7 +11,7 @@ repos:
       - id: docker-build
         name: docker build
         language: system
-        entry: buildah --storage-driver vfs bud -t artifactapi:pre-commit-test .
+        entry: buildah --storage-driver vfs bud --isolation chroot -t artifactapi:pre-commit-test .
         pass_filenames: false
         files: ^(Dockerfile|\.dockerignore|pyproject\.toml|src/)
         stages: [pre-commit]