Fix media-api restart loop and add registry build scripts

- Fix @/utils/logger path alias (tsc doesn't transform @/ in output)
- Add JWT_INVITE_SECRET to media-api compose environment block
- Fix redis-exporter depends_on to use service name not container name
- Fix upgrade.sh: restore tracked files deleted by restore_user_paths
- Add scripts/build-and-push.sh for building + pushing production images
- Add scripts/mirror-images.sh for mirroring third-party images

Bunker Admin

api/src/modules/media/services/thumbnail.service.ts

@@ -1,7 +1,7 @@
 import { spawn } from 'child_process';
 import fs from 'fs/promises';
 import path from 'path';
-import { logger } from '@/utils/logger';
+import { logger } from '../../../utils/logger';
 
 export interface ThumbnailOptions {
   videoPath: string;