Dockerize: one-command stack with auto Ollama model pull

`docker compose up -d --build` now brings up the whole thing automatically —
no host setup needed:

- All-in-one javis image: TigerVNC+XFCE desktop, Chrome, Python brain bridge,
  Node/bun bot, managed by supervisord (verified: all 6 programs RUNNING).
- ollama service + one-shot ollama-init that auto-pulls chat+embed models
  (verified end-to-end; `ollama list` shows pulled models).
- Discord token deferred: without DISCORD_BOT_TOKEN the desktop, bridge,
  Ollama and models all run; only the bot waits (no crash loop).
- Slim container deps (bridge/requirements-bridge.txt) drop the unused
  PyQt6/torch/chatterbox/sounddevice stack. Piper voice + Whisper models
  auto-download into named volumes.
- Configurable host ports (VNC_PORT/NOVNC_PORT/BRIDGE_PORT) to avoid clashing
  with a host VNC already on 5901. Bridge binds 0.0.0.0 in-container.

Verified: image builds; brain imports; bridge /health 200; noVNC 200;
X display :1 @1920x1080; auto-pull completes; supervisorctl status all RUNNING.

bridge/requirements-bridge.txt

@@ -0,0 +1,27 @@
+# Slim dependency set for the containerized brain bridge.
+# Excludes the upstream desktop GUI / dictation / packaging / alternate-TTS
+# stack (PyQt6, pyinstaller, sounddevice, webrtcvad, pynput, pygame,
+# chatterbox-tts/torch, mlx) which are unused in the Discord+VNC deployment.
+
+# --- Brain runtime (imported when the reply engine loads) ---
+python-dotenv==1.0.1
+faster-whisper==1.0.3
+mcp==1.13.1
+numpy<2.0.0
+rapidfuzz==3.6.1
+requests==2.32.3
+
+# --- Bridge HTTP service ---
+flask>=3.0.0
+
+# --- Text-to-speech (Piper) ---
+piper-tts>=1.3.0
+
+# --- Built-in tools (lazily imported; needed for full functionality) ---
+beautifulsoup4>=4.12.0
+lxml>=4.9.0
+html2text>=2020.1.16
+geoip2==4.8.0
+Pillow==10.4.0
+pytesseract==0.3.13
+faiss-cpu>=1.7.4