chore(oss): audit root config, compose, scripts, and catalog tests

Replace the 182-line inline schema in docker-compose.yml with a runner
over packages/server/migrations, add 004 restoring the constraints and
64-bit counters the inline SQL carried, skip migrations already recorded
in schema_versions, relabel the mount for SELinux, and drop the obsolete
compose version key. Retarget the catalog contract test at the migration
files.

Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq

test/integration-catalog.test.mjs

@@ -130,7 +130,6 @@ test('server, SDK, and PostgreSQL contracts match the integration catalog', asyn
   for (const path of [
     'packages/server/migrations/001_initial.sql',
     'packages/server/migrations/002_agent_integration_contract.sql',
-    'docker-compose.yml',
   ]) {
     assert.deepEqual(
       extractQuotedValues(await readText(path), constraintPattern, path),