feat(renderer): deploy the renderer next to the bot in compose

The bot now reaches the renderer at http://renderer:3000/api/gif on the
compose network instead of a separately deployed service. Both share
WHEELOFNAMES_API_TOKEN. CI runs the renderer's lint, typecheck, tests,
render smoke, and image build.

.github/workflows/ci.yml

@@ -63,3 +63,40 @@ jobs:
 
       - name: docker build
         run: docker build -t miti99bot .
+
+  renderer:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: renderer
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+          cache-dependency-path: renderer/package-lock.json
+
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run typecheck
+      - run: npm test
+
+      - name: Install Remotion browser runtime libraries
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libnspr4 \
+            libnss3 \
+            libgtk-3-0 \
+            libgbm1 \
+            libasound2t64 \
+            libxshmfence1 \
+            fonts-noto
+      - run: npm run browser:ensure
+      - run: npm run render:smoke
+      - run: npm run api:smoke
+
+      - name: docker build
+        run: docker build -t miti99bot-renderer .