Enable auth-service/api-gateway on production, build their images in CI

apps/auth-service/.env.example

@@ -0,0 +1,11 @@
+# apps/auth-service configuration. Copy to `.env` and edit for local dev:
+#   cp apps/auth-service/.env.example apps/auth-service/.env
+# Never commit a real JWT_SECRET.
+
+PORT=3010
+POSTGRES_DSN=postgresql://duoc_thu:duoc_thu@localhost:5432/duoc_thu
+# Required — the service refuses to start without one (see config.ts).
+# Any long random string is fine for local dev; never reuse this value
+# anywhere real.
+JWT_SECRET=local-dev-only-change-me
+JWT_EXPIRES_IN=12h