refactor(gateway): gateway↔system1 분리 — gateway=문짝, system1-web=독립

gateway에서 system1 프록시 제거, 대시보드+로그인+공유JS만 담당.
system1-web에 /auth/, /ai-api/ 프록시 이관. tkds-web 제거(gateway 흡수).
notification-bell URL tkfb→tkds, system3 로그인 URL tkds/dashboard로 변경.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -130,6 +130,7 @@ services:
       - ./system1-factory/web:/usr/share/nginx/html:ro
     depends_on:
       - system1-api
+      - sso-auth
     networks:
       - tk-network
 
@@ -417,22 +418,7 @@ services:
   # =================================================================
 
   # =================================================================
-  # Dashboard (tkds)
-  # =================================================================
-
-  tkds-web:
-    build:
-      context: ./tkds/web
-      dockerfile: Dockerfile
-    container_name: tk-tkds-web
-    restart: unless-stopped
-    ports:
-      - "30780:80"
-    networks:
-      - tk-network
-
-  # =================================================================
-  # Gateway
+  # Gateway (로그인 + 대시보드 + 공유JS)
   # =================================================================
 
   gateway:
@@ -445,9 +431,7 @@ services:
       - "30000:80"
     depends_on:
       - sso-auth
-      - system1-web
-      - system2-web
-      - system3-web
+      - system1-api
     networks:
       - tk-network
 
@@ -485,7 +469,7 @@ services:
       - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
     depends_on:
       - gateway
-      - tkds-web
+      - system1-web
       - system2-web
       - system3-web
       - tkpurchase-web