feat: add Dockerfile, deploy pipeline, Ollama infra job, weekly cron

Dockerfile

@@ -0,0 +1,19 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update \
+    && apt-get install -y ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Pfad spiegelt die Cargo-Ausgabestruktur:
+# current_exe() = /app/target/release/nazarick
+# 3× .parent() → /app/target/release → /app/target → /app (workspace_root) ✓
+RUN mkdir -p /app/target/release
+COPY target/aarch64-unknown-linux-gnu/release/nazarick /app/target/release/nazarick
+
+VOLUME ["/app/config", "/app/data"]
+
+EXPOSE 8765
+
+CMD ["/app/target/release/nazarick"]