feat: complete leave approval MVP

deploy/compose/compose.yaml

@@ -51,6 +51,20 @@ services:
     volumes:
       - minio-data:/data
 
+  ai-service:
+    build:
+      context: ../../ai-service
+    environment:
+      QWEN_API_KEY: ${QWEN_API_KEY:-}
+      QWEN_MODEL: ${QWEN_MODEL:-qwen-plus}
+    ports:
+      - "8000:8000"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/health')"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
 volumes:
   postgres-data-v1:
   redis-data:

deploy/compose/keycloak/realm-aioa.json

@@ -21,7 +21,7 @@
       "publicClient": true,
       "standardFlowEnabled": true,
       "directAccessGrantsEnabled": true,
-      "redirectUris": ["aioa://oauth/callback", "http://localhost:*"],
+      "redirectUris": ["aioa://oauth/callback", "aioa://oauth/logout", "http://localhost:*"],
       "webOrigins": ["+"],
       "attributes": {
         "pkce.code.challenge.method": "S256"