build(docker): GPU-ready test image for .9 (CUDA 12.4 + py3.11 + node22/ffmpeg)

Bundles the M1 milestone: mock voice pipeline (wsai) + dave/ selfbot voice
joiner. Entrypoint dispatches smoke/voice/mock/gpu/join/shell. .env mounted at
runtime (not baked). Built GPU-capable via NVIDIA CDI so later STT/TTS drop in.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Dockerfile

@@ -0,0 +1,46 @@
+# watch_sceen_ai — GPU-ready test image for the .9 host (RTX 5050).
+#
+# Bundles everything the current M1 milestone needs:
+#   * CUDA runtime (so future faster-whisper / TTS can use the GPU)
+#   * Python 3.11 (STT/TTS asset compat per README) for the wsai voice pipeline
+#   * Node 22 + ffmpeg for the dave/ selfbot voice joiner (DAVE/MLS E2EE)
+#
+# STT/TTS/Brain are still mock at this milestone, so nothing GPU-heavy runs yet;
+# the image is built GPU-capable so the next milestones drop straight in.
+FROM nvidia/cuda:12.4.1-runtime-ubuntu22.04
+
+ENV DEBIAN_FRONTEND=noninteractive \
+    PYTHONUNBUFFERED=1 \
+    PIP_NO_CACHE_DIR=1
+
+# --- system deps: python 3.11, node 22, ffmpeg -----------------------------
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        software-properties-common ca-certificates curl gnupg ffmpeg \
+    && add-apt-repository -y ppa:deadsnakes/ppa \
+    && apt-get update && apt-get install -y --no-install-recommends \
+        python3.11 python3.11-venv python3.11-dev \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
+    && apt-get install -y --no-install-recommends nodejs \
+    && ln -sf /usr/bin/python3.11 /usr/local/bin/python \
+    && python -m ensurepip --upgrade \
+    && python -m pip install --no-cache-dir --upgrade pip pytest \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# --- dave/ node deps (cached layer) ----------------------------------------
+COPY dave/package.json dave/package-lock.json ./dave/
+RUN cd dave && npm ci
+
+# --- app source ------------------------------------------------------------
+COPY wsai ./wsai
+COPY tests ./tests
+COPY dave ./dave
+COPY requirements.txt PLAN.md README.md ./
+COPY docker-entrypoint.sh /usr/local/bin/entrypoint
+RUN chmod +x /usr/local/bin/entrypoint
+
+# .env (DISCORD_SELFBOT_TOKEN) is NOT baked in — mount it at runtime:
+#   -v $(pwd)/.env:/app/.env:ro
+ENTRYPOINT ["entrypoint"]
+CMD ["smoke"]