RegWatch backend : FastAPI + Postgres partagé + Docker/CI homelab

- SECRET_KEY et DATABASE_URL externalisés (Vault -> env), plus de secret en dur
- SQLite -> postgres-shared (psycopg2), schéma créé au boot (entrypoint.sh)
- Dockerfile + docker-compose (Watchtower) + .gitea/workflows/build.yml

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -0,0 +1,16 @@
+services:
+  regwatch-backend:
+    image: git.nfteam.ovh/mouigni/regwatch-backend:latest
+    container_name: regwatch-backend
+    restart: unless-stopped
+    pull_policy: always
+    env_file: .env
+    ports:
+      - "8114:8000"
+    labels:
+      - "com.centurylinklabs.watchtower.enable=true"
+      - "homepage.group=RegWatch"
+      - "homepage.name=RegWatch API"
+      - "homepage.icon=fastapi.png"
+      - "homepage.href=https://regwatch-api.nfteam.ovh"
+      - "homepage.description=API veille réglementaire (FastAPI, scrapers CIR/SCCS)"