chore: маршрут аудита, внутренний токен academic и CI

.gitignore

@@ -7,6 +7,8 @@ build/
 .env.prod
 /data/
 /backups/
+/exports/
+/texput.log
 node_modules/
 # Локальные сессии Kilo Code — не часть репозитория.
 .kilo/

.gitlab-ci.yml

@@ -0,0 +1,29 @@
+# Единый merge gate: тесты, ktlint и detekt.
+# Testcontainers поднимает PostgreSQL 18 через Docker-in-Docker, поэтому runner
+# должен разрешать privileged-сервисы (docker:dind) и сеть до docker:2375.
+stages:
+  - check
+
+variables:
+  GRADLE_OPTS: "-Dorg.gradle.daemon=false"
+  GRADLE_USER_HOME: "$CI_PROJECT_DIR/.gradle"
+  DOCKER_HOST: "tcp://docker:2375"
+  DOCKER_TLS_CERTDIR: ""
+  TESTCONTAINERS_HOST_OVERRIDE: "docker"
+
+check:
+  stage: check
+  image: eclipse-temurin:21-jdk
+  services:
+    - name: docker:27-dind
+      alias: docker
+  cache:
+    key: "gradle-$CI_COMMIT_REF_SLUG"
+    paths:
+      - .gradle/caches
+      - .gradle/wrapper
+  script:
+    - ./gradlew --no-daemon test ktlintCheck detekt
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+    - if: '$CI_COMMIT_BRANCH'

docker-compose.prod.yml

@@ -54,8 +54,9 @@ services:
     image: lms-academic:latest
     restart: unless-stopped
     environment:
-      <<: [*db-env, *jwt-env]
+      <<: [*db-env, *jwt-env, *internal-env]
       LMS_DB_URL: jdbc:postgresql://postgres:5432/${LMS_DB_NAME:-lms}?currentSchema=academic
+      LMS_IDENTITY_URI: http://identity:8081
       LMS_CONTENT_ASSETS_DIR: /data/content-assets
     volumes:
       - lms_assets:/data/content-assets

services/gateway/src/main/resources/application.yml

@@ -12,7 +12,7 @@ spring:
             - id: identity
               uri: ${LMS_IDENTITY_URI:http://localhost:8081}
               predicates:
-                - Path=/api/v1/auth/**,/api/v1/accounts/**,/api/v1/groups/**,/api/v1/students/**,/api/v1/teachers/**,/api/v1/promotion/**
+                - Path=/api/v1/auth/**,/api/v1/accounts/**,/api/v1/groups/**,/api/v1/students/**,/api/v1/teachers/**,/api/v1/promotion/**,/api/v1/audit/**
             - id: progress-profile
               uri: ${LMS_PROGRESS_URI:http://localhost:8083}
               predicates: