ci: bridge docker-deploy compose to gitea_gitea; bypass turbo for e2e

- docker-compose.ci.yml: attach app/postgres/redis to the external
  gitea_gitea network so the act_runner job container (which lives on
  gitea_gitea) can reach the compose services by name. Otherwise
  'localhost:3100' from the job container resolves to the job container
  itself, not the compose-network app — all health checks and smoke
  tests were hitting nothing.
- ci.yml: switch health/smoke URLs from localhost to http://app:3100
  and expose PLAYWRIGHT_BASE_URL so the smoke config can override.
- ci.yml: run E2E playwright directly via pnpm --filter, bypassing
  turbo which strict-filters PLAYWRIGHT_DATABASE_URL and friends.
- playwright.ci.config.ts: honour PLAYWRIGHT_BASE_URL env override.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/web/playwright.ci.config.ts

@@ -11,7 +11,7 @@ export default defineConfig({
     ? [["list"], ["html", { outputFolder: "playwright-report" }]]
     : "list",
   use: {
-    baseURL: "http://localhost:3100",
+    baseURL: process.env["PLAYWRIGHT_BASE_URL"] ?? "http://localhost:3100",
     trace: "on-first-retry",
     screenshot: "only-on-failure",
   },