Story 2.1: OKF Server skeleton + deploy wiring

As a platform engineer, I want a new OKF Server service running behind Kong with health checks and CI, So that there is a foundation to build repository management and ingestion on.

Acceptance Criteria: Given the new components/okf-server/ Node/Express (CommonJS, createApp(), imports shared/lib/), When it is deployed, Then routes mount at /api/okf/* behind Kong (service + route in kong_config.json), /health and /ready return 200, it runs as a non-root CPU-only container with a Dockerfile + docker-compose.yaml entry + Ansible vars + a CI build/scan/promote job (ADR-0001), And jose-based auth mirrors gov-chat-backend (JWKS via OIDC discovery) and the Jest createApp() test pattern is established. (FR-21 partial; Architecture §8.1, §8.6; ADR-okf-001; NFR-S6)

---

Epic 2 · PRD: okf-server · Sprint key: 2-1-okf-server-skeleton-deploy · Branch: feat/okf-server