fix(sso): Switch Dockerfiles from alpine to slim for QEMU compatibility

The alpine-based images cause "Illegal instruction" errors during
cross-platform builds (ARM64) due to musl libc issues with QEMU emulation.

Changes:
- Dockerfile: node:22-alpine → node:22-slim
- Dockerfile.migrator: node:22-alpine → node:22-slim
- Remove apk commands, use apt-get for Debian
- Update healthcheck to use Node.js fetch instead of wget
- Update migrate.sh to use bash instead of sh

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: mjunaidca

apps/sso/Dockerfile

@@ -3,12 +3,13 @@
 # Next.js 15 SSO Platform Dockerfile
 # ============================================================================
 # Slim production image - migrations run separately on first deploy
+# Using node:22-slim (Debian) instead of alpine for better glibc compatibility
+# and to avoid QEMU emulation issues during cross-platform builds
 # ============================================================================
 
 # ----- Stage 1: Dependencies -----
-FROM node:22-alpine AS deps
+FROM node:22-slim AS deps
 
-RUN apk add --no-cache libc6-compat
 WORKDIR /app
 
 RUN corepack enable && corepack prepare pnpm@latest --activate
@@ -17,7 +18,7 @@ COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile
 
 # ----- Stage 2: Builder -----
-FROM node:22-alpine AS builder
+FROM node:22-slim AS builder
 
 WORKDIR /app
 RUN corepack enable && corepack prepare pnpm@latest --activate
@@ -43,7 +44,7 @@ ENV DOCKER_BUILD=true
 RUN pnpm build
 
 # ----- Stage 3: Runner (slim production image) -----
-FROM node:22-alpine AS runner
+FROM node:22-slim AS runner
 
 WORKDIR /app
 
@@ -66,6 +67,6 @@ USER nextjs
 EXPOSE 3001
 
 HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
-    CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:3001/api/health || exit 1
+    CMD node -e "fetch('http://127.0.0.1:3001/api/health').then(r => r.ok ? process.exit(0) : process.exit(1)).catch(() => process.exit(1))"
 
 CMD ["node", "server.js"]

apps/sso/Dockerfile.migrator

@@ -2,11 +2,11 @@
 # SSO Platform Migrator - Lightweight init container for DB migrations
 # ============================================================================
 # Runs migrations and seeding before main services start
+# Using node:22-slim (Debian) for better glibc compatibility
 # ============================================================================
 
-FROM node:22-alpine
+FROM node:22-slim
 
-RUN apk add --no-cache libc6-compat
 WORKDIR /app
 
 RUN corepack enable && corepack prepare pnpm@latest --activate
@@ -22,17 +22,22 @@ RUN pnpm install --frozen-lockfile --ignore-scripts
 
 # Migration script
 COPY <<'EOF' /app/migrate.sh
-#!/bin/sh
+#!/bin/bash
 set -e
 
 echo "=== SSO Platform Migrations ==="
 echo "Waiting for database..."
 
-# Wait for postgres to be ready
-until pg_isready -h ${DB_HOST:-postgres} -p ${DB_PORT:-5432} -U ${DB_USER:-postgres} 2>/dev/null; do
-  echo "Waiting for postgres..."
-  sleep 2
-done
+# Wait for postgres to be ready (using pg_isready if available, otherwise skip wait)
+if command -v pg_isready &> /dev/null; then
+  until pg_isready -h ${DB_HOST:-postgres} -p ${DB_PORT:-5432} -U ${DB_USER:-postgres} 2>/dev/null; do
+    echo "Waiting for postgres..."
+    sleep 2
+  done
+else
+  echo "pg_isready not available, waiting 5s..."
+  sleep 5
+fi
 
 echo "Database ready. Running migrations..."
 pnpm db:push
@@ -43,6 +48,8 @@ pnpm seed:setup
 echo "=== Migrations complete ==="
 EOF
 
-RUN apk add --no-cache postgresql-client && chmod +x /app/migrate.sh
+RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client \
+    && rm -rf /var/lib/apt/lists/* \
+    && chmod +x /app/migrate.sh
 
 CMD ["/app/migrate.sh"]