fix(ci): make controller GPU opt-in

[skulidropek]

Summary

• make controller GPU access opt-in via compose overlays instead of unconditional gpus: all
• keep per-project GPU controls isolated to each project/container
• refactor action bar and split parser tests to satisfy CI lint gates

Verification

• docker compose config has no gpus by default
• docker compose -f docker-compose.yml -f docker-compose.gpu.yml config includes gpus
• bun run --cwd packages/app lint
• bun run --cwd packages/app test
• bun run --cwd packages/app typecheck
• bun run --cwd packages/app build
• bun run --cwd packages/lib lint
• bun run --cwd packages/lib test
• bun run --cwd packages/lib typecheck
• bun test packages/lib/tests/core/templates.test.ts
• git diff --check