refactor: consolidate CI and local dev orchestration (#108)

## Summary
- Extract shared bootstrap functions into `scripts/bootstrap-common.sh` (eliminates ~120 lines of duplicated forge/cast commands from e2e.yml)
- Create reusable `scripts/wait-for-service.sh` for health checks (replaces 60-line inline wait-for-stack)
- Merge dev and CI entrypoints into unified scripts branching on `CI` env var (delete `docker/ci-entrypoints/`)
- Replace 4 per-service CI Dockerfiles with parameterized `docker/Dockerfile.service-ci`
- Add `sync-tax-rates.mjs` to CI image builder stage
- Fix: CI now grants txnBot recenter access (was missing)
- Fix: txnBot funding parameterized (CI=10eth, local=1eth)
- Delete 5 obsolete migration docs and 4 DinD integration files

Net: -1540 lines removed

Closes #107

## Test plan
- [ ] E2E pipeline passes (bootstrap sources shared script, services use old images with commands override)
- [ ] build-ci-images pipeline builds all 4 services with unified Dockerfile
- [ ] Local dev stack boots via `./scripts/dev.sh start`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: openhands <openhands@all-hands.dev>
Reviewed-on: https://codeberg.org/johba/harb/pulls/108

containers/ponder-entrypoint.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${CI:-}" == "true" ]]; then
+  # ── CI path ────────────────────────────────────────────────────────
+  cd /app/services/ponder
+
+  echo "[ponder-ci] Starting Ponder indexer..."
+
+  : "${DATABASE_URL:?DATABASE_URL is required}"
+  : "${PONDER_RPC_URL_1:?PONDER_RPC_URL_1 is required}"
+
+  export PONDER_RPC_TIMEOUT=${PONDER_RPC_TIMEOUT:-20000}
+  export HOST=${HOST:-0.0.0.0}
+  export PORT=${PORT:-42069}
+
+  cat > .env.local <<EOF
+DATABASE_URL=${DATABASE_URL}
+PONDER_RPC_URL_1=${PONDER_RPC_URL_1}
+DATABASE_SCHEMA=${DATABASE_SCHEMA:-ponder_ci}
+START_BLOCK=${START_BLOCK:-0}
+EOF
+
+  echo "[ponder-ci] Environment configured:"
+  echo "  DATABASE_URL: ${DATABASE_URL}"
+  echo "  PONDER_RPC_URL_1: ${PONDER_RPC_URL_1}"
+  echo "  START_BLOCK: ${START_BLOCK:-0}"
+
+  exec npm run dev
+fi
+
+# ── Local dev path ─────────────────────────────────────────────────
+ROOT_DIR=/workspace
+
+# shellcheck source=entrypoint-common.sh
+source "$ROOT_DIR/containers/entrypoint-common.sh"
+
+entrypoint_checkout_branch "$ROOT_DIR" "ponder-entrypoint"
+
+CONTRACT_ENV=$ROOT_DIR/tmp/containers/contracts.env
+PONDER_WORKDIR=$ROOT_DIR/services/ponder
+
+while [[ ! -f "$CONTRACT_ENV" ]]; do
+  echo "[ponder-entrypoint] waiting for contracts env"
+  sleep 2
+done
+
+cd "$PONDER_WORKDIR"
+
+# Wait for .env.local to be created by bootstrap
+while [[ ! -f .env.local ]]; do
+  echo "[ponder-entrypoint] waiting for .env.local"
+  sleep 2
+done
+
+# Load contract deployment info
+source "$CONTRACT_ENV"
+START_BLOCK=$(grep START_BLOCK .env.local 2>/dev/null | cut -d= -f2 || echo "")
+EXPECTED_SCHEMA="ponder_local_${START_BLOCK}"
+
+# Check if schema changed (contract redeployment detected)
+if [[ -n "$START_BLOCK" ]]; then
+  CURRENT_SCHEMA=$(grep DATABASE_SCHEMA .env.local 2>/dev/null | cut -d= -f2 || echo "")
+
+  if [[ -n "$CURRENT_SCHEMA" && "$CURRENT_SCHEMA" != "$EXPECTED_SCHEMA" ]]; then
+    echo "[ponder-entrypoint] Contract redeployment detected (schema changed: $CURRENT_SCHEMA -> $EXPECTED_SCHEMA)"
+    echo "[ponder-entrypoint] Resetting Ponder database..."
+
+    export PGPASSWORD=ponder_local
+    psql -h postgres -U ponder -d ponder_local -c \
+      "DROP SCHEMA IF EXISTS \"$CURRENT_SCHEMA\" CASCADE;" 2>/dev/null || true
+
+    echo "[ponder-entrypoint] Old schema dropped successfully"
+  fi
+fi
+
+entrypoint_require_kraiken_lib "$ROOT_DIR" "ponder-entrypoint"
+entrypoint_install_deps "ponder-entrypoint"
+
+# Load and export all environment variables from .env.local
+if [[ -f .env.local ]]; then
+  echo "[ponder-entrypoint] Loading environment from .env.local"
+  set -a
+  source .env.local
+  set +a
+fi
+
+export CHOKIDAR_USEPOLLING=${CHOKIDAR_USEPOLLING:-1}
+export HOST=0.0.0.0
+export PORT=${PORT:-42069}
+export PONDER_RPC_TIMEOUT=${PONDER_RPC_TIMEOUT:-20000}
+
+exec npm run dev