feat(infra): banco DEV isolado (pg-dev) + bump scoreodonto.com/subdominio

- pg-dev/: container PostGIS único multi-DB (ref+dev por template) p/ desgrudar dev da produção; scripts refresh/reset + manifesto (secrets fora do git)
- bump scoreodonto.com e subdominio.clube67.com (backends dev apontam p/ pgdev via .env)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

pg-dev/docker-compose.yml

@@ -0,0 +1,23 @@
+# Banco DEV isolado da VPS4 (rootless) — ver scoreodonto.com/documentação/BANCO-DEV-ESTRATEGIA.md
+# Subir:  set -a; source secrets.env; set +a; docker compose up -d
+services:
+  pgdev:
+    image: postgis/postgis:18-3.6
+    container_name: pgdev
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: devadmin
+      POSTGRES_PASSWORD: ${PGDEV_PASSWORD:?defina PGDEV_PASSWORD (source secrets.env)}
+      POSTGRES_DB: postgres
+    volumes:
+      - pgdev-data:/var/lib/postgresql   # PG18+: montar a raiz, não /data
+    networks:
+      - soc          # mesma rede dos backends de dev → acesso por DNS "pgdev"
+    # SEM "ports:" → não exposto ao host/internet (só acessível via rede soc)
+
+volumes:
+  pgdev-data:
+
+networks:
+  soc:
+    external: true