fix(infra): align ready health, drop events shared-net, pin Go 1.27.1, short-skip docker smoke

T20-I2/I3/I5/I8: dev compose /api/v1/ready, main events networks match test/dev, Dockerfile golang:1.27.1-bookworm, and testing.Short skip for pi-agent docker build.

deploy/app/Dockerfile

@@ -9,7 +9,7 @@ RUN npm ci
 COPY web/ ./
 RUN npm run build
 
-FROM golang:1.23-bookworm AS go-builder
+FROM golang:1.27.1-bookworm AS go-builder
 
 # GOPROXY defaults to the official proxy to preserve upstream build behavior.
 # Hosts behind networks that cannot reach proxy.golang.org can pass a

docker-compose.dev.yml

@@ -135,7 +135,7 @@ services:
     ports:
       - "${APP_PUBLISH_HOST:-127.0.0.1}:${HTTP_PORT:-8080}:${HTTP_PORT:-8080}"
     healthcheck:
-      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:${HTTP_PORT:-8080}/api/v1/health"]
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:${HTTP_PORT:-8080}/api/v1/ready"]
       interval: 10s
       timeout: 5s
       retries: 6

docker-compose.main.yml

@@ -184,7 +184,6 @@ services:
     restart: always
     networks:
       - main-net
-      - shared-net
 
 networks:
   main-net:

internal/agent/pi_runner_image_test.go

@@ -66,6 +66,9 @@ func TestPiAgentDockerfileCopiesRunnerRelativeImports(t *testing.T) {
 }
 
 func TestPiAgentDockerBuildContext_RunnerModulesPresent(t *testing.T) {
+	if testing.Short() {
+		t.Skip("docker build smoke skipped under -short")
+	}
 	if _, err := exec.LookPath("docker"); err != nil {
 		t.Skip("docker CLI not available")
 	}