chore: bump oven/bun to 1.4.2 (upstream 8d30945) and drop stale docker-compose.yaml

Dockerfile

@@ -10,8 +10,9 @@
 #     .
 
 # Both stages must pin the SAME oven/bun tag BY DIGEST; a tag alone is not a production pin.
-# Digest resolved from docker.io for oven/bun:1.4.0 (multi-arch OCI index).
-ARG BUN_IMAGE=oven/bun:1.4.0@sha256:5ff609364c049b54eb0ff560ec96319729a972078ef2c755d758f0c6ef89c2d6
+# Digest resolved from docker.io for oven/bun:1.4.2 (multi-arch OCI index); same pin as
+# upstream lidge-jun/opencodex 8d30945 (#6713, runtime Bun 1.4.2).
+ARG BUN_IMAGE=oven/bun:1.4.2@sha256:9114c058aeae42162ee16dd5084b95fe9473970bb6bcb5b232ab1630f0546895
 
 FROM ${BUN_IMAGE} AS build
 RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates && rm -rf /var/lib/apt/lists/*

README.en.md

@@ -270,7 +270,7 @@ gh attestation verify oci://ghcr.io/nordz0r/opencodex:2.83.0 -R nordz0r/opencode
 - **Non-root** (`USER bun`), read-only-rootfs compatible; only
   `/home/bun/.opencodex`, `/home/bun/.codex` (state volumes) and `/tmp` are writable.
 - **Multi-arch**: `linux/amd64` and `linux/arm64` from the pinned
-  `oven/bun:1.4.0@sha256:<digest>` base.
+  `oven/bun:1.4.2@sha256:<digest>` base.
 - **Embedded CLIs**: `codex`, `claude`, `grok`, `omp` (`@oh-my-pi/pi-coding-agent`).
 - **Upstream container contract**: `OCX_SERVICE=1`, separate `CODEX_HOME`,
   compatibility-version gate (`docker/verify-compatibility.ts`), hub seed

README.md

@@ -269,7 +269,7 @@ gh attestation verify oci://ghcr.io/nordz0r/opencodex:2.83.0 -R nordz0r/opencode
 - **Не root** (`USER bun`), совместим с read-only rootfs; записывать можно только в
   `/home/bun/.opencodex`, `/home/bun/.codex` (тома состояния) и `/tmp`.
 - **Мультиархитектурность**: `linux/amd64` и `linux/arm64` на закреплённой базе
-  `oven/bun:1.4.0@sha256:<digest>`.
+  `oven/bun:1.4.2@sha256:<digest>`.
 - **Встроенные CLI**: `codex`, `claude`, `grok`, `omp` (`@oh-my-pi/pi-coding-agent`).
 - **Контракт контейнера upstream**: `OCX_SERVICE=1`, отдельный `CODEX_HOME`, проверка версии
   совместимости (`docker/verify-compatibility.ts`), начальный конфиг хаба `docker/config.json`