[Deploy] Docker Compose — infrastructure stack (postgres, vault, rabbitmq, consul, minio)

[maxzaikin]

Summary

Create production-ready Docker Compose file for all infrastructure containers.

Context

See Operations-Deployment-Guide and
Architecture-Container-Architecture

Acceptance Criteria

• deploy/docker/docker-compose.infra.yml created
• vfw-dc-postgres-assets (172.20.0.8, port 5432)
• vfw-dc-postgres-secrets (172.20.0.9, port 5433)
• vfw-dc-postgres-identity (172.20.0.10, port 5434)
• vfw-dc-rabbitmq (172.20.0.6, port 5671 AMQPS)
• vfw-dc-vault (172.20.0.7, port 8200 internal only)
• vfw-dc-consul (172.20.0.18, port 8500)
• vfw-dc-minio (172.20.0.19, port 9000)
• All containers on vfw-network (172.20.0.0/24)
• Health checks for every container
• Volumes mapped to /mnt/vfw-data/
• Secrets via Docker secrets (no plaintext passwords in compose file)
• Restart policy: always
• Verified: docker compose up -d starts all containers healthy