initial: split from gov-agreg — vreau.digital standalone platform

Moved from gov-agreg/src/pages/achizitii/* to root (drop prefix).
- 22 pages migrated, 127 files total
- All internal links: /achizitii/X → /X (176 occurrences fixed)
- AchizitiiLayout subnav rewritten: /X paths, top-right link to vreaudigital.ro hub
- BaseLayout new (vreau.digital branding, OG tags, site URL)
- astro.config.mjs: site https://vreau.digital, server output (was static)
- docker-compose: port 5096 (vreaudigital is 5095), container vreau-digital
- deploy.sh: paths /opt/vreau-digital, log /var/log/vreau-digital-deploy.log

Backend shared with gov-agreg:
- PostgreSQL satra (same schemas: seap, firms, anaf, anre, ...)
- Photon, Martin tiles
- Infisical /vreaudigital path (DATABASE_URL etc. shared)

build: PASS (npx astro check 0 errors, npm run build 5s vite + 10s server)

Dockerfile

@@ -0,0 +1,51 @@
+# ──────── Stage 1: build ────────
+FROM node:22-alpine AS build
+WORKDIR /app
+
+COPY package.json package-lock.json ./
+RUN npm ci
+
+COPY . .
+
+ARG BUILD_SHA=dev
+ARG BUILD_REF=local
+ARG BUILD_TIME
+ENV PUBLIC_BUILD_SHA=$BUILD_SHA
+ENV PUBLIC_BUILD_REF=$BUILD_REF
+ENV PUBLIC_BUILD_TIME=$BUILD_TIME
+
+RUN npm run build
+
+# ──────── Stage 2: runtime ────────
+FROM node:22-alpine
+WORKDIR /app
+
+# Infisical CLI — pinned binary (release tarball, deterministic).
+# Bump INFISICAL_CLI_VERSION when upgrading.
+ARG INFISICAL_CLI_VERSION=0.43.81
+RUN apk add --no-cache bash curl ca-certificates && \
+    ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') && \
+    curl -fsSL "https://github.com/Infisical/cli/releases/download/v${INFISICAL_CLI_VERSION}/cli_${INFISICAL_CLI_VERSION}_linux_${ARCH}.tar.gz" \
+      | tar -xz -C /usr/local/bin infisical && \
+    chmod +x /usr/local/bin/infisical && \
+    infisical --version && \
+    rm -rf /var/cache/apk/*
+
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/node_modules ./node_modules
+COPY package.json ./
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ARG BUILD_SHA=dev
+ARG BUILD_REF=local
+ARG BUILD_TIME
+ENV PUBLIC_BUILD_SHA=$BUILD_SHA
+ENV PUBLIC_BUILD_REF=$BUILD_REF
+ENV PUBLIC_BUILD_TIME=$BUILD_TIME
+
+ENV HOST=0.0.0.0
+ENV PORT=4321
+EXPOSE 4321
+
+ENTRYPOINT ["/entrypoint.sh"]