fix: Dockerfile, entrypoint, and CI for multi-repo deployment

- Fix requirements.txt path to shared_lib/requirements.txt
- Guard alembic migrations with RUN_MIGRATIONS env var
- Fix APP_MODULE default to app:app
- CI: add git submodule update, deploy shared coop stack from /root/coop

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -7,6 +7,7 @@ on:
 env:
   REGISTRY: registry.rose-ash.com:5000
   IMAGE: blog
+  REPO_DIR: /root/blog
 
 jobs:
   build-and-deploy:
@@ -33,9 +34,10 @@ jobs:
           DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
         run: |
           ssh "root@$DEPLOY_HOST" "
-            cd /root/blog
+            cd ${{ env.REPO_DIR }}
             git fetch origin main
             git reset --hard origin/main
+            git submodule update --init --recursive
           "
 
       - name: Build and push image
@@ -43,8 +45,10 @@ jobs:
           DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
         run: |
           ssh "root@$DEPLOY_HOST" "
-            cd /root/blog
-            docker build --build-arg CACHEBUST=\$(date +%s) -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }} .
+            cd ${{ env.REPO_DIR }}
+            docker build --build-arg CACHEBUST=\$(date +%s) \
+              -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest \
+              -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }} .
             docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
             docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }}
           "
@@ -54,10 +58,10 @@ jobs:
           DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
         run: |
           ssh "root@$DEPLOY_HOST" "
-            cd /root/blog
+            cd /root/coop
             source .env
-            docker stack deploy -c docker-compose.yml blog
+            docker stack deploy -c docker-compose.yml coop
             echo 'Waiting for services to update...'
             sleep 10
-            docker stack services blog
+            docker stack services coop
           "