build: bootstrap Go toolchain and generated APIs

deploy/Dockerfile.runtime

@@ -0,0 +1,17 @@
+FROM golang:1.27.0-bookworm AS build
+
+WORKDIR /src
+COPY . .
+RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/rvbox-server ./cmd/rvbox-server \
+    && CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/rvc ./cmd/rvc
+
+FROM alpine:3.22.1
+
+RUN apk add --no-cache ca-certificates \
+    && addgroup -S -g 65532 rvbox \
+    && adduser -S -D -H -u 65532 -G rvbox rvbox
+COPY --from=build /out/rvbox-server /usr/local/bin/rvbox-server
+COPY --from=build /out/rvc /usr/local/bin/rvc
+USER 65532:65532
+ENTRYPOINT ["/usr/local/bin/rvbox-server"]
+