feat(ops): add a scheduler service (schedule:work) — runs wg-sample + prune-audit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker-compose.prod.yml

@@ -71,6 +71,16 @@ services:
       redis:
         condition: service_started
 
+  # Runs the Laravel scheduler loop (every-minute clusev:wg-sample, daily clusev:prune-audit).
+  scheduler:
+    <<: *image
+    command: php artisan schedule:work
+    depends_on:
+      mariadb:
+        condition: service_healthy
+      redis:
+        condition: service_started
+
   caddy:
     image: caddy:2-alpine   # pin by @sha256 digest before the first prod push
     restart: unless-stopped

docker-compose.yml

@@ -51,6 +51,17 @@ services:
       redis:
         condition: service_started
 
+  # Laravel scheduler loop (every-minute clusev:wg-sample, daily clusev:prune-audit).
+  scheduler:
+    <<: *app
+    user: "${HOST_UID:-1002}:${HOST_GID:-1002}"
+    command: php artisan schedule:work
+    depends_on:
+      mariadb:
+        condition: service_healthy
+      redis:
+        condition: service_started
+
   mariadb:
     image: mariadb:11
     restart: unless-stopped