feat: tkpurchase 시스템 Phase 1 - 협력업체 마스터 + 당일 방문 관리

신규 독립 시스템 tkpurchase (구매/방문 관리) 구축:
- 협력업체 CRUD + 소속 작업자 관리 (마스터 데이터 소유)
- 당일 방문 등록/체크인/체크아웃 + 일괄 마감
- 업체 자동완성, CSV 내보내기, 집계 통계
- 자정 자동 체크아웃 (node-cron)
- tkuser 협력업체 읽기 전용 탭 + 권한 그리드(tkpurchase-perms) 추가
- docker-compose에 tkpurchase-api/web 서비스 추가

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -285,6 +285,46 @@ services:
     networks:
       - tk-network
 
+  # =================================================================
+  # Purchase Management (tkpurchase)
+  # =================================================================
+
+  tkpurchase-api:
+    build:
+      context: ./tkpurchase/api
+      dockerfile: Dockerfile
+    container_name: tk-tkpurchase-api
+    restart: unless-stopped
+    ports:
+      - "30400:3000"
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - DB_HOST=mariadb
+      - DB_PORT=3306
+      - DB_USER=${MYSQL_USER:-hyungi_user}
+      - DB_PASSWORD=${MYSQL_PASSWORD}
+      - DB_NAME=${MYSQL_DATABASE:-hyungi}
+      - SSO_JWT_SECRET=${SSO_JWT_SECRET}
+    depends_on:
+      mariadb:
+        condition: service_healthy
+    networks:
+      - tk-network
+
+  tkpurchase-web:
+    build:
+      context: ./tkpurchase/web
+      dockerfile: Dockerfile
+    container_name: tk-tkpurchase-web
+    restart: unless-stopped
+    ports:
+      - "30480:80"
+    depends_on:
+      - tkpurchase-api
+    networks:
+      - tk-network
+
   # =================================================================
   # AI Service — 맥미니로 이전됨 (~/docker/tk-ai-service/)
   # =================================================================
@@ -345,6 +385,7 @@ services:
       - gateway
       - system2-web
       - system3-web
+      - tkpurchase-web
     networks:
       - tk-network