Scaffold gitea-review-bot: thin matrix-nio PR-review bot (auto-map, threaded review, subagent panel, merge/reject/deploy)

docker-compose.yml

@@ -0,0 +1,18 @@
+# gitea-review-bot — Spark deployment. `docker compose up -d` runs it detached; restart survives
+# reboots. Host networking reaches Synapse (TLS), Gitea (LAN), and the Mac (WireGuard SSH alias).
+services:
+  bot:
+    build: .
+    image: gitea-review-bot
+    container_name: gitea-review-bot
+    network_mode: host
+    restart: unless-stopped
+    volumes:
+      - ./.env:/app/.env:ro
+      - ./config.toml:/app/config.toml:ro
+      # Writable state (room→repo map, enabled agents, reviewed heads, thread roots). Survives
+      # restarts/rebuilds; gitignored.
+      - ./state:/app/state:rw
+      # Reuse the SAME Spark→Mac key matrix-bridge uses (chmod 600 on the host).
+      # Override the host path with GRB_SSH_KEY_HOST if the key lives elsewhere.
+      - ${GRB_SSH_KEY_HOST:-/home/modelo/.ssh/id_ed25519}:/root/.ssh/id_ed25519:ro