feat: worst-scan fansub web — initial release

Posts engine (SQLite + auto-publisher via poller), public feed with
clickable tags, reader, admin panel, submit/search/queue tools.
BFF proxy to pipeline API. Clean dark design. Docker-ready.

docker-compose.yml

@@ -0,0 +1,16 @@
+services:
+  web:
+    build: .
+    container_name: worst-scan-web
+    ports:
+      - "3000:3000"
+    environment:
+      - API_BASE_URL=${API_BASE_URL:-http://host.docker.internal:8080/api/v1}
+      - API_KEY=${API_KEY:-}
+      - WEB_PASSWORD=${WEB_PASSWORD:-}
+    volumes:
+      - data:/app/data
+    restart: unless-stopped
+
+volumes:
+  data: