refactor: split monolith into 3 microservices (frontend, backend, discord-gateway)

- Extract services into services/{frontend,backend,discord-gateway}
- Create packages/shared/ for shared logger, errors, utils, types
- Setup Modular MVC pattern in backend (controller→service→repository)
- Setup event-driven architecture in discord-gateway with Redis pub/sub
- Move Docker files to infra/docker/ with per-service Dockerfiles
- Update docker-compose.yml to use Traefik-only routing (no port exposes)
- Update GitHub Actions deploy workflow for multi-service matrix build
- Fix all import paths and resolve type errors across all services
- All 3 services pass tsc --noEmit clean

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

infra/docker/Dockerfile.backend

@@ -0,0 +1,29 @@
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Install pnpm
+RUN npm install -g pnpm
+
+# Copy workspace files
+COPY pnpm-workspace.yaml .
+COPY pnpm-lock.yaml .
+COPY package.json .
+
+# Copy shared package
+COPY packages/shared ./packages/shared
+
+# Copy backend service
+COPY services/backend ./services/backend
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Build backend
+RUN pnpm run build:server
+
+# Expose port
+EXPOSE 3001
+
+# Start backend
+CMD ["node", "dist/index.js"]

infra/docker/Dockerfile.discord-gateway

@@ -0,0 +1,29 @@
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Install pnpm
+RUN npm install -g pnpm
+
+# Copy workspace files
+COPY pnpm-workspace.yaml .
+COPY pnpm-lock.yaml .
+COPY package.json .
+
+# Copy shared package
+COPY packages/shared ./packages/shared
+
+# Copy discord gateway service
+COPY services/discord-gateway ./services/discord-gateway
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Build discord gateway
+RUN pnpm run build
+
+# Create recordings directory
+RUN mkdir -p /app/recordings
+
+# Start discord gateway
+CMD ["node", "dist/index.js"]

infra/docker/Dockerfile.frontend

@@ -0,0 +1,29 @@
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Install pnpm
+RUN npm install -g pnpm
+
+# Copy workspace files
+COPY pnpm-workspace.yaml .
+COPY pnpm-lock.yaml .
+COPY package.json .
+
+# Copy shared package
+COPY packages/shared ./packages/shared
+
+# Copy frontend service
+COPY services/frontend ./services/frontend
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Build frontend
+RUN pnpm run build:web
+
+# Expose port (served by backend)
+EXPOSE 3000
+
+# Start development server
+CMD ["pnpm", "run", "dev:web"]

infra/docker/docker-compose.yml

@@ -0,0 +1,67 @@
+version: '3.8'
+
+services:
+  # Backend Service (REST API + WebSocket via Traefik)
+  backend:
+    build:
+      context: ..
+      dockerfile: infra/docker/Dockerfile.backend
+    container_name: bete-backend
+    restart: unless-stopped
+    env_file:
+      - ../../.env
+    environment:
+      NODE_ENV: production
+      WEBSERVER_PORT: 3000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.bete-backend.rule=Host(`imphnen.asepharyana.my.id`) && PathPrefix(`/api`, `/ws`)"
+      - "traefik.http.routers.bete-backend.entrypoints=websecure"
+      - "traefik.http.routers.bete-backend.tls=true"
+      - "traefik.http.services.bete-backend.loadbalancer.server.port=3000"
+    depends_on:
+      - discord-gateway
+    networks:
+      - app-shared-net
+
+  # Discord Gateway Service (Event capture and processing — no HTTP)
+  discord-gateway:
+    build:
+      context: ..
+      dockerfile: infra/docker/Dockerfile.discord-gateway
+    container_name: bete-discord-gateway
+    restart: unless-stopped
+    env_file:
+      - ../../.env
+    environment:
+      NODE_ENV: production
+    volumes:
+      - ../recordings:/app/recordings
+    networks:
+      - app-shared-net
+
+  # Frontend Service (React Dashboard via Traefik)
+  frontend:
+    build:
+      context: ..
+      dockerfile: infra/docker/Dockerfile.frontend
+    container_name: bete-frontend
+    restart: unless-stopped
+    environment:
+      VITE_API_URL: https://imphnen.asepharyana.my.id
+      VITE_WS_URL: wss://imphnen.asepharyana.my.id
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.bete-frontend.rule=Host(`imphnen.asepharyana.my.id`)"
+      - "traefik.http.routers.bete-frontend.entrypoints=websecure"
+      - "traefik.http.routers.bete-frontend.tls=true"
+      - "traefik.http.services.bete-frontend.loadbalancer.server.port=3000"
+    depends_on:
+      - backend
+    networks:
+      - app-shared-net
+
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true