feat(cli): YAML config support + published JSON Schema

[PunGrumpy]

What

Infra users live in YAML (they're writing Compose files anyway) — docker-doctor's config now meets them there.

YAML config files

docker-doctor.config.yaml / .yml join the resolution order (appended after .json, so existing projects resolve identically) and work with --config <path> too. Parsing reuses the yaml dependency the Compose parser already ships — zero new dependencies. Unlike .ts/.js configs, YAML/JSON need no "type": "module" in package.json.

Published JSON Schema

The website serves /schema.json, generated from allRules at build time (Next.js force-static route handler) — every rule key autocompletes with its description, categories and severities are enums, and it can never drift from the rule set. Editors pick it up via:

# yaml-language-server: $schema=https://docker-doctor.vercel.app/schema.json
rules:
  "docker-doctor/no-root-user": error

or a "$schema" key in JSON configs (the validator already strips unknown top-level keys, so $schema is safe at runtime).

Cleanup folded in

• apps/web now depends on @docker-doctor/core (workspace) for the schema route; web tsconfig target bumped ES2017 → ES2022 to typecheck core's named-capture-group regexes.
• Removed the config test suite's expectPartialCategories cast workaround — dead since categories became Partial<Record<…>> in feat(cli): export DockerDoctorConfig type and defineConfig helper #33.

Testing

• 7 new loader tests: .yaml / .yml load, .json-over-.yaml precedence, malformed YAML → ConfigError, invalid severity in YAML → ConfigError, --config custom.yaml. Suite: 88 core + 15 CLI pass; typecheck + ultracite clean.
• Web build prerenders /schema.json; verified the emitted body contains all five categories and generated rule keys.
• E2E on a fixture: a .yaml config through the built CLI drops pin-image-version (rule off) and prefer-slim (Image Size off) while no-root-user still fires.

Changeset: patch bump for @docker-doctor/cli.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docker-doctor	Ready	Preview, Comment	Jul 25, 2026 4:06pm

[github-actions]

React Doctor found no new issues. 🎉

_{Reviewed by React Doctor for commit a1bc55d.}