fix: use Bun image from AWS ECR Public Gallery to avoid Docker Hub rate limits

- Switch from docker.io/oven/bun to public.ecr.aws/w0g4q7i6/bun:1.2.18-alpine
- Keeps Bun as preferred runtime while avoiding Docker Hub rate limits
- AWS ECR Public Gallery has better availability for AWS CodeBuild

Author: claudfuen

apps/web/Dockerfile.migration

@@ -1,13 +1,13 @@
 # Lightweight migration-only Docker image
-FROM node:18-alpine
+FROM public.ecr.aws/w0g4q7i6/bun:1.2.18-alpine
 
 WORKDIR /app
 
 # Copy package files first for better caching
-COPY package.json ./
+COPY package.json bun.lock* ./
 
-# Install dependencies using npm (since we're using Node.js now)
-RUN npm ci --production=false
+# Install all dependencies (including dev deps like tsx if needed)
+RUN bun install --frozen-lockfile
 
 # Copy the entire src directory to avoid import path issues
 COPY src/ ./src/
@@ -25,5 +25,5 @@ RUN echo "=== Directory structure ===" && \
 # Set environment for better error reporting
 ENV NODE_ENV=production
 
-# Default command runs migrations with verbose output - use tsx since we're on Node.js
-CMD ["sh", "-c", "echo 'Starting migration container...' && npx tsx scripts/run-migrations.ts"] 
+# Default command runs migrations with verbose output
+CMD ["sh", "-c", "echo 'Starting migration container...' && bun run scripts/run-migrations.ts"]