feat: Add Docker, uv, rust-toolchain for reproducible builds

- Add Dockerfile with multi-stage build (CUDA + Rust + Python)
- Add docker-compose.yml for dev/test/gpu services
- Add rust-toolchain.toml pinning nightly-2024-12-01
- Add pyproject.toml with uv for Python dependency management
- Commit Cargo.lock and uv.lock for reproducible builds
- Update CI to verify Docker build works
- Update README with Docker quickstart

Relates to #10 (GPU acceleration)

Author: masoud@anyscale.com

.dockerignore

@@ -0,0 +1,46 @@
+# Git
+.git
+.gitignore
+
+# Build artifacts
+target/
+zkml/target/
+*.pyc
+__pycache__/
+.pytest_cache/
+*.egg-info/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Params (large files, should be mounted or downloaded)
+params/
+params_kzg/
+params_ipa/
+*.params
+
+# Proofs (generated at runtime)
+proof
+proof_output/
+*.bin
+
+# Virtual environments
+.venv/
+venv/
+env/
+
+# Documentation
+docs/
+*.md
+!README.md
+
+# CI/CD
+.github/
+

.github/workflows/ci.yml

@@ -20,8 +20,9 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@nightly
+        uses: dtolnay/rust-toolchain@master
         with:
+          toolchain: nightly-2024-12-01
           components: rustfmt, clippy
 
       - name: Cache cargo registry
@@ -64,6 +65,31 @@ jobs:
         run: cargo clippy --lib -- -W clippy::all || echo "::warning::Clippy warnings found (non-blocking)"
         continue-on-error: true
 
-  # Note: AWS tests are intentionally excluded from CI to save costs.
-  # Run them manually with: cd tests/aws && python gpu_test.py
+  # Docker build - only runs when Docker-related files change
+  docker-build:
+    name: Docker Build
+    runs-on: ubuntu-latest
+    if: |
+      contains(github.event.pull_request.title, 'docker') ||
+      contains(github.event.pull_request.title, 'Docker') ||
+      contains(github.event.head_commit.message, 'docker') ||
+      contains(github.event.head_commit.message, 'Docker')
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Build dev image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          target: dev
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: distributed-zkml:dev
 
+  # Note: AWS/GPU tests are intentionally excluded from CI to save costs.

.gitignore

@@ -1,6 +1,6 @@
 # Rust
 target/
-Cargo.lock
+# Cargo.lock is committed for reproducible builds (removed from ignore)
 
 # Python
 __pycache__/