ci: bridge docker-deploy compose to gitea_gitea; bypass turbo for e2e

- docker-compose.ci.yml: attach app/postgres/redis to the external
  gitea_gitea network so the act_runner job container (which lives on
  gitea_gitea) can reach the compose services by name. Otherwise
  'localhost:3100' from the job container resolves to the job container
  itself, not the compose-network app — all health checks and smoke
  tests were hitting nothing.
- ci.yml: switch health/smoke URLs from localhost to http://app:3100
  and expose PLAYWRIGHT_BASE_URL so the smoke config can override.
- ci.yml: run E2E playwright directly via pnpm --filter, bypassing
  turbo which strict-filters PLAYWRIGHT_DATABASE_URL and friends.
- playwright.ci.config.ts: honour PLAYWRIGHT_BASE_URL env override.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.ci.yml

@@ -13,3 +13,22 @@
 services:
   app:
     volumes: !reset []
+    # Attach to the gitea_gitea network too so the act_runner job container
+    # (which lives on gitea_gitea) can reach the compose services by name.
+    # Otherwise "localhost:3100" from inside the job container resolves to
+    # the job container itself, not the compose-network app.
+    networks:
+      - default
+      - gitea_gitea
+  postgres:
+    networks:
+      - default
+      - gitea_gitea
+  redis:
+    networks:
+      - default
+      - gitea_gitea
+
+networks:
+  gitea_gitea:
+    external: true