feat: add bounded postgres data migration stack

docker-compose.yml

@@ -1,4 +1,55 @@
 services:
+  postgres:
+    image: pgvector/pgvector:pg16
+    environment:
+      POSTGRES_DB: "${POSTGRES_DB:-duriin}"
+      POSTGRES_USER: "${POSTGRES_USER:-duriin}"
+      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env before starting PostgreSQL}"
+    command:
+      - postgres
+      - -c
+      - shared_buffers=128MB
+      - -c
+      - work_mem=4MB
+      - -c
+      - maintenance_work_mem=64MB
+      - -c
+      - effective_cache_size=256MB
+      - -c
+      - max_connections=40
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    mem_limit: 512m
+    cpus: "0.50"
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+    networks:
+      - nginx_proxy_manager_default
+
+  postgres-migrate:
+    profiles: [migration]
+    build:
+      context: .
+      provenance: false
+    command: node scripts/migrate-sqlite-to-postgres.js
+    env_file: .env
+    volumes:
+      - ./config.json:/app/config.json:ro
+      - ./data:/data:ro
+    environment:
+      DATABASE_URL: "postgresql://${POSTGRES_USER:-duriin}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-duriin}"
+      SQLITE_ARCHIVE_PATH: /data/archive.sqlite
+      SQLITE_INTELLIGENCE_PATH: /data/intelligence.sqlite
+    depends_on:
+      postgres:
+        condition: service_healthy
+    networks:
+      - nginx_proxy_manager_default
+
   api:
     build:
       context: .
@@ -155,3 +206,6 @@ services:
 networks:
   nginx_proxy_manager_default:
     external: true
+
+volumes:
+  postgres_data: