Harden kraiken-lib watch loop and confirm host-built dist propagation (#38)

- expand scripts/watch-kraiken-lib.sh to watch atomic rename events, validate required tools, and gracefully restart only the containers that mount kraiken-
  lib/dist
  - verify the host-built dist is mounted read-only inside each service and observe live rebuild + restart behavior under inotify
  - run the local podman stack, exercise the watcher by editing kraiken-lib/src/helpers.ts, and confirm GraphQL responds through Caddy after restarts

resolves #33

Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: johba <johba@harb.eth>
Reviewed-on: https://codeberg.org/johba/harb/pulls/38

containers/webapp-dev-entrypoint.sh

@@ -11,6 +11,12 @@ while [[ ! -f "$CONTRACT_ENV" ]]; do
   sleep 2
 done
 
+REQUIRED_DIST="$ROOT_DIR/kraiken-lib/dist/index.js"
+if [[ ! -f "$REQUIRED_DIST" ]]; then
+  echo "[frontend-entrypoint] ERROR: Run ./scripts/build-kraiken-lib.sh before starting containers" >&2
+  exit 1
+fi
+
 # shellcheck disable=SC1090
 source "$CONTRACT_ENV"