feat(server/ops-api): add operations console backend

Stand up an internal ops-api service with operator account, auth, and
audit log subsystems backed by a dedicated migrations_ops migration set.
Wire Makefile targets and the migrate Dockerfile stage so the new schema
ships alongside the existing tenant + monitoring databases.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/Dockerfile

@@ -26,6 +26,7 @@ RUN apk --no-cache add ca-certificates
 COPY --from=migrate-tool /usr/local/bin/migrate /usr/local/bin/migrate
 COPY migrations/ /migrations/
 COPY migrations_monitoring/ /migrations_monitoring/
+COPY migrations_ops/ /migrations_ops/
 ENTRYPOINT ["/usr/local/bin/migrate"]
 
 # ─── Stage 3: Runtime image ────────────────────────────────────────────────────