chore(dev): enable DEV_AUTH_BYPASS in the dev compose stack

The api service in docker-compose.dev.yml ran with NODE_ENV=development but
without DEV_AUTH_BYPASS, so the dockerized dev stack enforced OIDC even though
no Authelia is reachable on the dev box. Set DEV_AUTH_BYPASS=true on the dev
override only; guarded by NODE_ENV!='production' and the production image bakes
NODE_ENV=production, so it can never reach a shipped image.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docker-compose.dev.yml

@@ -9,6 +9,10 @@ services:
       - ./apps/api/src:/app/apps/api/src
     environment:
       NODE_ENV: development
+      # Local-dev only: skip OIDC and authenticate as Dev User id 1. Guarded by
+      # NODE_ENV !== 'production' (and the production image bakes NODE_ENV=production),
+      # so this can never activate in a shipped image. Required by the e2e harness.
+      DEV_AUTH_BYPASS: 'true'
 
   mariadb:
     ports: