refactor: clean up codebase — remove legacy references, optimize dockerfile, prune .env.example, simplify CI/CD

- Traefik: remove asephstech/asephscloud SSL certs, fix api.insecure, add ping healthcheck
- .env.example: prune from 145 to 30 vars (remove Firebase, Discord, Coolify, etc.)
- scraper.Dockerfile: remove Node.js & Chromium from runtime, add healthcheck
- CI/CD: remove orphan container ref, commented blocks, fix lint workflow
- infra: remove mysql config (no active service), clean up middleware config
- root: remove .nvmrc (dup), renovate.json (use dependabot), simplify Makefile
- scripts: fix legacy package refs, simplify update-deps to use bun
- docs: remove stale handoff-log, quality-gates, superpowers designs, archived files
- compose: add healthchecks to traefik, redis, and scraper-api services

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

infra/compose/scraper.yml

@@ -1,7 +1,13 @@
 services:
   scraper-api:
     container_name: scraper-api
+<<<<<<< HEAD
     image: ghcr.io/asepharyana/asepharyana-hub/scraper-api:sha-80027ee
+||||||| parent of 092c0b3 (Refactor Dockerfile for scraper, update Traefik configuration, and clean up scripts)
+    image: ghcr.io/asepharyana/asepharyana-hub/scraper-api:sha-b199f8c
+=======
+    image: ghcr.io/asepharyana/asepharyana-hub/scraper-api:latest
+>>>>>>> 092c0b3 (Refactor Dockerfile for scraper, update Traefik configuration, and clean up scripts)
     restart: always
     networks:
       app-shared-net:
@@ -9,12 +15,16 @@ services:
           - scraper-api
     env_file:
       - ../../.env
+    healthcheck:
+      test: ['CMD', 'curl', '-f', 'http://localhost:4091/health']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
     environment:
       - REDIS_URL=redis://redis:6379
       - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
       - DATABASE_URL=${DATABASE_URL}
-      - OTEL_EXPORTER_OTLP_ENDPOINT=http://otlp-metrics-backend:4317
-      - OTEL_SERVICE_NAME=scraper-api
 networks:
   app-shared-net:
     name: app-shared-net

infra/compose/shared.yml

@@ -9,6 +9,12 @@ services:
           - redis
     ports:
       - '${SHARED_REDIS_EXPOSE:-127.0.0.1:6379:6379}'
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 10s
+      timeout: 3s
+      retries: 3
+      start_period: 5s
     volumes:
       - 'redis_data:/data'
 

infra/compose/traefik.yml

@@ -49,6 +49,13 @@ services:
       - '--experimental.plugins.real-ip.version=v1.0.3'
       - '--experimental.plugins.blockpath.moduleName=github.com/traefik/plugin-blockpath'
       - '--experimental.plugins.blockpath.version=v0.2.1'
+      - '--ping=true'
+    healthcheck:
+      test: ['CMD', 'wget', '--spider', 'http://localhost:8080/ping']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
     environment:
       - DOCKER_API_VERSION=1.41
       - GOMEMLIMIT=4096MiB
@@ -56,10 +63,10 @@ services:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${TRAEFIK_CONFIG_PATH:-/root/asepharyana-hub/infra/traefik/dynamic}:/etc/traefik/dynamic:ro
-      - ${TRAEFIK_CERT_ASEPHARYANA_MY_ID_PEM:-/root/asepharyana.my.id.pem}:/etc/traefik/certs/asepharyana.my.id.pem:ro
-      - ${TRAEFIK_CERT_ASEPHARYANA_MY_ID_KEY:-/root/asepharyana.my.id.key}:/etc/traefik/certs/asepharyana.my.id.key:ro
-      - ${TRAEFIK_CERT_ASEPHARYANA_WEB_ID_PEM:-/root/asepharyana.web.id.pem}:/etc/traefik/certs/asepharyana.web.id.pem:ro
-      - ${TRAEFIK_CERT_ASEPHARYANA_WEB_ID_KEY:-/root/asepharyana.web.id.key}:/etc/traefik/certs/asepharyana.web.id.key:ro
+      - ${TRAEFIK_CERT_MY_ID_PEM:-/root/asepharyana.my.id.pem}:/etc/traefik/certs/asepharyana.my.id.pem:ro
+      - ${TRAEFIK_CERT_MY_ID_KEY:-/root/asepharyana.my.id.key}:/etc/traefik/certs/asepharyana.my.id.key:ro
+      - ${TRAEFIK_CERT_WEB_ID_PEM:-/root/asepharyana.web.id.pem}:/etc/traefik/certs/asepharyana.web.id.pem:ro
+      - ${TRAEFIK_CERT_WEB_ID_KEY:-/root/asepharyana.web.id.key}:/etc/traefik/certs/asepharyana.web.id.key:ro
     labels:
       - 'traefik.enable=true'
       - 'traefik.http.routers.traefik.rule=Host(`traefik.asepharyana.my.id`) || Host(`traefik.asepharyana.web.id`)'