fix: API pnpm deploy --legacy flag, AI add maturin for underthesea build

- API Dockerfile: add --legacy to pnpm deploy (pnpm v10 breaking change)
- AI Dockerfile: install Rust toolchain + maturin (required by underthesea 6.8.0)

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>

apps/api/Dockerfile

@@ -36,7 +36,7 @@ RUN npx prisma generate \
 
 # Use pnpm deploy to produce a flat, production-only node_modules
 # This strips devDependencies and hoists only what @goodgo/api needs.
-RUN pnpm deploy --filter @goodgo/api --prod /app/pruned
+RUN pnpm deploy --legacy --filter @goodgo/api --prod /app/pruned
 
 # ---- Production ----
 FROM node:22-slim AS production

libs/ai-services/Dockerfile

@@ -2,13 +2,16 @@ FROM python:3.12-slim
 
 WORKDIR /app
 
-# Install system deps for underthesea / numpy + dumb-init for signal handling
+# Install system deps for underthesea / numpy + dumb-init + Rust toolchain for maturin
 RUN apt-get update && \
-    apt-get install -y --no-install-recommends gcc g++ dumb-init && \
+    apt-get install -y --no-install-recommends gcc g++ dumb-init curl && \
+    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --profile minimal && \
     rm -rf /var/lib/apt/lists/*
+ENV PATH="/root/.cargo/bin:${PATH}"
 
 COPY pyproject.toml .
-RUN pip install --no-cache-dir . 2>/dev/null || pip install --no-cache-dir \
+RUN pip install --no-cache-dir maturin && \
+    pip install --no-cache-dir . 2>/dev/null || pip install --no-cache-dir \
     "fastapi==0.115.0" \
     "uvicorn[standard]==0.32.0" \
     "xgboost==2.1.0" \