Target Platform API v1 and publish the Console image

[XnLemon]

Closes #14

Outcome

• move every active Gateway request to Platform API /v1 with no old-route probing
• make production configuration runtime-injected so the same image can be promoted across environments
• add a fail-closed Node static server, no-store config response, readiness endpoint, non-root container, and configuration tests
• publish a multi-architecture GHCR image from annotated semantic tags with provenance, SBOM, immutable digest, and checksums

Validation

• pnpm typecheck
• pnpm test (58 passing tests)
• pnpm build
• node --check server.mjs
• workflow YAML parse

The local Docker daemon was unavailable, so the image build is intentionally left to CI and the Stack published-digest acceptance gate.

Compatibility

Only Platform API /v1 is supported. The Console does not redirect, probe, or fall back to /v2, /v3, or /v4.

[XnLemon]

Release-readiness review complete: the Console targets Platform API /v1, the production server directory-request crash is covered by regression tests, release tag identity/digest checks are strict, and required CI is green. @xianingawa-wq, please provide the required independent approval for v0.1.0.