feat: add local Docker runtime profile

[Super-Sky]

Refs #12

Completed

• Adds local Compose profile with Athena API, PostgreSQL, Redis, and optional Control Plane Web.
• Adds healthchecks, readiness dependencies, business-app base URL/token env contract, smoke script, and bilingual docs.
• Static Compose config and smoke-script validation pass.
• Live dual-service Docker smoke now passes with Athena, fund assistant, PostgreSQL, Redis, fund Web, and a fake OpenAI-compatible model.

Live smoke evidence

• Athena completed an Agent Run and invoked the registered account_overview remote business tool.
• Fund conversation trace recorded run_status=completed, one tool call, and output present.
• CSV analysis preserved the temporary-data boundary and returned conservative, balanced, and aggressive options.
• Compose containers, network, and volumes were removed automatically after the run.

Boundary

• No fund, holding, trade, or business-evidence data is added to Athena.
• Redis is topology support, not business truth.
• Production app/callback identity remains tracked separately in Remote tool outbound service authentication with secret references #24/App-facing service authentication, tenant isolation, and run quotas #25/Agent Run app-facing read API 增加 workspace 授权边界 #26.