feat: publish standalone worker

Separate worker packaging and service lifecycle from the control plane.

docker-compose.yml

@@ -0,0 +1,17 @@
+services:
+  worker:
+    image: ${RSMON_WORKER_IMAGE:-reg.rsxx.ru/rsmon/rsmon-worker:latest}
+    restart: unless-stopped
+    env_file:
+      - .env
+    ports:
+      - "${WORKER_BIND_IP:-127.0.0.1}:${WORKER_PORT:-27401}:${WORKER_PORT:-27401}"
+    volumes:
+      - worker-data:/var/lib/rsmon-worker
+    cap_add:
+      - NET_RAW
+    security_opt:
+      - no-new-privileges:true
+
+volumes:
+  worker-data: