T1: Scaffold `services/grader/` to the tech-stack standard

[ckrough]

Complexity: M

Scope

Greenfield FastAPI service at services/grader/, following the services/petdata/ pattern:

• uv-managed, src/grader/ layout.
• Dockerfile and Docker Compose wiring (part of the one-command local stack).
• Config module with env prefix GRADER_.
• Health endpoint.
• structlog JSON logging.
• OpenTelemetry API instrumentation (API only, no vendor SDKs).
• /llms.txt via fast-llms-txt.
• A CLAUDE.md with build/test commands.
• FastAPI title "Profile Grader".

Out of scope

• Any domain logic (T2: Port the pipeline core (parse-independent) #294).
• Data layer (T4: Supabase-backed Store + Alembic migration + org scoping #296).
• Auth (T6: Port the API routes with auth, tightened CORS, typed responses #298).

Dependencies

• Blocked by: none.
• Blocks: T2: Port the pipeline core (parse-independent) #294 (and, transitively via config/auth scaffolding, T6: Port the API routes with auth, tightened CORS, typed responses #298).

Acceptance criteria

• docker compose up starts the service; GET /health returns 200.
• GET /llms.txt returns 200 with a non-empty body.
• uv run pytest collects and passes (a smoke test asserting the app boots).
• ruff check, ruff format --check, bandit -r src/, mypy src/ all exit 0.
• Logs emit as single-line JSON (a captured log record parses as JSON).

---

Spec: docs/planning/profile-grader-integration-spec.md (Section 8, T1). Epic: #292.
Standalone services/grader/ per resolved decision D1; naming per D4.

[ckrough]

daedalus lead claimed

[ckrough]

daedalus lead complete. PR #317 (non-draft, Closes #293), branch issue/293, commit 6e921c3. Configured lint and test gates both exit 0; grader's own ruff/format/bandit/mypy/pytest all exit 0 (10 passed); review-gate APPROVE (plus a second APPROVE on the /simplify delta); security review returned no blocking findings. AC1/AC2 verified against a real docker build + docker run. CI and local-stack wiring split out as #316. Issue closes on merge.