fix: add image tags and --no-build to prevent compose rebuilds

Add explicit :ci image tags to docker-compose.yml so Docker
Compose finds pre-built images from the build job instead of
rebuilding Rust from scratch.  Add --no-build flag for safety.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: liweinan

.github/workflows/ci.yml

@@ -85,7 +85,7 @@ jobs:
 
       - name: Start built services
         run: |
-          docker compose up -d authcore upctl-svc upctl-web
+          docker compose up -d --no-build authcore upctl-svc upctl-web
           docker compose logs --tail=20 authcore upctl-svc upctl-web
 
       - name: Wait for authcore (30s timeout)

docker-compose.yml

@@ -17,6 +17,7 @@ services:
       retries: 10
 
   authcore:
+    image: authcore:ci
     build:
       context: ./authcore
     depends_on:
@@ -32,6 +33,7 @@ services:
       - "3000:3000"
 
   upctl-svc:
+    image: upctl-svc:ci
     build:
       context: ./upctl-svc
     depends_on:
@@ -47,6 +49,7 @@ services:
       - uploads:/app/uploads
 
   upctl-web:
+    image: upctl-web:ci
     build:
       context: ./upctl-web
     depends_on: