feat: dockerfiles and full docker-compose orchestration

Add multi-stage Dockerfiles for Python services (Dockerfile.service) and
React dashboard (Dockerfile.dashboard + nginx.conf). Update docker-compose.yml
with all seven application services: news-fetcher, sentiment-analyzer,
signal-generator, trade-executor, learning-engine, api-gateway, and dashboard.

docker/Dockerfile.dashboard

@@ -0,0 +1,34 @@
+# Multi-stage Dockerfile for the React dashboard.
+# Stage 1: build the Vite/React app
+# Stage 2: serve via nginx
+
+# ---------------------------------------------------------------------------
+# Stage 1: Node build
+# ---------------------------------------------------------------------------
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+COPY dashboard/package.json dashboard/package-lock.json ./
+RUN npm ci
+
+COPY dashboard/ .
+RUN npm run build
+
+# ---------------------------------------------------------------------------
+# Stage 2: nginx to serve the static build
+# ---------------------------------------------------------------------------
+FROM nginx:alpine
+
+# Remove default nginx site
+RUN rm /etc/nginx/conf.d/default.conf
+
+# Copy custom nginx config
+COPY docker/nginx.conf /etc/nginx/conf.d/default.conf
+
+# Copy built assets from the builder stage
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

docker/Dockerfile.service

@@ -0,0 +1,45 @@
+# Multi-stage Dockerfile for all Python microservices.
+# Build args:
+#   EXTRAS  — pip optional-dependency groups (e.g. "news", "sentiment,trading")
+#   SERVICE_MODULE — Python module name under services/ (e.g. "news_fetcher")
+
+# ---------------------------------------------------------------------------
+# Stage 1: builder — install Python dependencies
+# ---------------------------------------------------------------------------
+FROM python:3.12-slim AS builder
+
+WORKDIR /app
+
+# Copy project metadata and source so pip can resolve the local package
+COPY pyproject.toml .
+COPY shared/ shared/
+COPY services/ services/
+COPY backtester/ backtester/
+COPY alembic/ alembic/
+COPY alembic.ini .
+
+ARG EXTRAS="dev"
+RUN pip install --no-cache-dir ".[$EXTRAS]"
+
+# ---------------------------------------------------------------------------
+# Stage 2: slim runtime image
+# ---------------------------------------------------------------------------
+FROM python:3.12-slim
+
+WORKDIR /app
+
+# Copy installed packages and CLI entry-points from the builder
+COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+# Copy application source code
+COPY --from=builder /app .
+
+ARG SERVICE_MODULE="api_gateway"
+ENV SERVICE_MODULE=${SERVICE_MODULE}
+
+# Simple health check — verify the Python process is running
+HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
+    CMD python -c "import sys; sys.exit(0)" || exit 1
+
+CMD python -m services.${SERVICE_MODULE}.main

docker/nginx.conf

@@ -0,0 +1,63 @@
+# nginx configuration for the trading-bot dashboard.
+# Serves the React SPA and proxies API / WebSocket requests to the api-gateway.
+
+server {
+    listen 80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # ---------------------------------------------------------------------------
+    # SPA: serve index.html for any path not matching a static file
+    # ---------------------------------------------------------------------------
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # ---------------------------------------------------------------------------
+    # Proxy /api/* to the api-gateway service
+    # ---------------------------------------------------------------------------
+    location /api/ {
+        proxy_pass http://api-gateway:8000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # ---------------------------------------------------------------------------
+    # Proxy /auth/* to the api-gateway service
+    # ---------------------------------------------------------------------------
+    location /auth/ {
+        proxy_pass http://api-gateway:8000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # ---------------------------------------------------------------------------
+    # Proxy /health to the api-gateway service
+    # ---------------------------------------------------------------------------
+    location /health {
+        proxy_pass http://api-gateway:8000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    # ---------------------------------------------------------------------------
+    # WebSocket upgrade for /ws
+    # ---------------------------------------------------------------------------
+    location /ws {
+        proxy_pass http://api-gateway:8000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 86400;
+    }
+}