svcforge: reference implementation

Complete working build of the system learn-python/ teaches.
164 tests, mypy --strict clean, domain coverage 99%.

.dockerignore

@@ -0,0 +1,31 @@
+# Build context is the repo root (docker build -f services/<svc>/Dockerfile .).
+# Everything here is either a host artifact, a secret, or dead weight in a layer.
+.venv/
+.git/
+.github/
+.gitea/
+tests/
+**/__pycache__
+*.pyc
+.mypy_cache/
+.ruff_cache/
+.pytest_cache/
+.hypothesis/
+.coverage
+htmlcov/
+dist/
+build/
+*.egg-info/
+
+# secrets never enter a build context, let alone a layer
+.env
+*.env
+!.env.example
+
+# not needed at runtime
+deploy/
+docs/
+scripts/
+Makefile
+RUNBOOK.md
+README.md