Add Sequential Thinking compatibility server and JWKS support

deploy/seqthink/Dockerfile

@@ -1,28 +1,6 @@
 # Sequential Thinking Age-Encrypted Wrapper
-# Beat 1: Plaintext skeleton - encryption added in Beat 2
 
-# Stage 1: Build Go wrapper
-FROM golang:1.23-alpine AS go-builder
-
-WORKDIR /build
-
-# Install build dependencies
-RUN apk add --no-cache git make
-
-# Copy go mod files
-COPY go.mod go.sum ./
-RUN go mod download
-
-# Copy source code
-COPY . .
-
-# Build the wrapper binary
-RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo \
-    -ldflags '-w -s -extldflags "-static"' \
-    -o seqthink-wrapper \
-    ./cmd/seqthink-wrapper
-
-# Stage 2: Build Python MCP server
+# Stage 1: Build Python MCP server
 FROM python:3.11-slim AS python-builder
 
 WORKDIR /mcp
@@ -35,16 +13,17 @@ RUN pip install --no-cache-dir \
     uvicorn[standard]==0.27.0 \
     pydantic==2.5.3
 
-# Copy MCP server stub (to be replaced with real implementation)
-COPY deploy/seqthink/mcp_stub.py /mcp/server.py
+# Copy MCP compatibility server
+COPY deploy/seqthink/mcp_server.py /mcp/server.py
 
-# Stage 3: Runtime
+# Stage 2: Runtime
 FROM debian:bookworm-slim
 
 # Install runtime dependencies
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
     ca-certificates \
+    curl \
     python3 \
     python3-pip && \
     apt-get clean && \
@@ -59,8 +38,8 @@ RUN pip3 install --no-cache-dir --break-system-packages \
 # Create non-root user
 RUN useradd -r -u 1000 -m -s /bin/bash seqthink
 
-# Copy binaries
-COPY --from=go-builder /build/seqthink-wrapper /usr/local/bin/
+# Copy wrapper binary built on host (GOWORK=off GOOS=linux go build ...)
+COPY deploy/seqthink/bin/seqthink-wrapper /usr/local/bin/seqthink-wrapper
 COPY --from=python-builder /mcp/server.py /opt/mcp/server.py
 
 # Copy entrypoint