fix: NATS pipeline bugs, add integration tests and service runners

Fix three critical bugs preventing the NATS message pipeline from working:

- FlowProcessor now subscribes to config-push topic (was missing entirely),
  using DeliverPolicy.All to replay config on service restart
- NATS streams use wildcard subjects (tg.flow.>) instead of per-topic
  narrow filters that caused 503 errors on publish
- Subscriber dispatch loop has exponential backoff on errors to prevent
  tight error loops

Add service runner scripts (gateway, config, LLM) and a 7-test
integration suite that verifies config CRUD, WebSocket round-trip,
and full LLM text-completion through the NATS pipeline.

Fix Docker Compose infra: pin Tempo to v2.6.1, remove deprecated Loki
config fields, add user:0 for volume permissions, remap conflicting
ports (FalkorDB 6380, OTLP 4327/4328).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ts/package.json

@@ -6,9 +6,15 @@
     "dev": "turbo dev",
     "lint": "turbo lint",
     "test": "turbo test",
-    "clean": "turbo clean"
+    "clean": "turbo clean",
+    "gateway": "tsx scripts/run-gateway.ts",
+    "config-svc": "tsx scripts/run-config.ts",
+    "llm:claude": "tsx scripts/run-llm-claude.ts",
+    "llm:openai": "tsx scripts/run-llm-openai.ts",
+    "test:pipeline": "tsx scripts/test-pipeline.ts"
   },
   "devDependencies": {
+    "tsx": "^4.21.0",
     "turbo": "^2.5.0",
     "typescript": "^5.8.0"
   },