fix: restore reviewable migration evidence

Dockerfile

@@ -0,0 +1,18 @@
+# syntax=docker/dockerfile:1
+FROM golang:1.25-alpine AS build
+WORKDIR /src
+COPY go.mod go.sum ./
+RUN go mod download
+COPY . .
+RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /out/TokenThief ./
+
+FROM alpine:3.20
+RUN apk add --no-cache ca-certificates tzdata && \
+    addgroup -S app && adduser -S -G app app
+COPY --from=build /out/TokenThief /usr/local/bin/TokenThief
+COPY filter.yaml /etc/tokenthief/filter.yaml
+ENV FILTER_FILE=/etc/tokenthief/filter.yaml \
+    TZ=Asia/Shanghai
+USER app
+EXPOSE 8080
+ENTRYPOINT ["/usr/local/bin/TokenThief"]