revert: remove Chromium/Playwright deps from Dockerfile; add supervisorctl support

- Revert Dockerfile to before the Playwright system deps / Chromium copy
  (commit 6e9726f). The ConnectError is a service-not-running issue, not
  a missing-browser issue.

- Add [unix_http_server], [supervisorctl], and [rpcinterface:supervisor]
  sections so 'supervisorctl status' works inside the container.

- Redirect scanner stdout/stderr to /var/log/scanner.log so startup
  errors are inspectable.

Dockerfile

@@ -39,19 +39,11 @@ WORKDIR /app
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libpq5 postgresql-client curl tini supervisor nginx \
-    libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdbus-1-3 \
-    libdrm2 libgbm1 libgtk-3-0 libnspr4 libxcomposite1 libxdamage1 \
-    libxfixes3 libxrandr2 libxshmfence1 libpango-1.0-0 libcairo2 \
-    libasound2 libatspi2.0-0 libx11-xcb1 fonts-liberation \
     && rm -rf /var/lib/apt/lists/* \
     && apt-get clean
 
-# Copy Python deps and Playwright/Chromium browser from builder
+# Copy Python deps from builder
 COPY --from=builder /install /usr/local
-COPY --from=builder /root/.cache/ms-playwright /root/.cache/ms-playwright
-
-# Tell Playwright where to find Chromium (baked from builder)
-ENV PLAYWRIGHT_BROWSERS_PATH=/root/.cache/ms-playwright
 
 # Copy application code
 COPY apps/api/src ./src