Go Multi-Stage Docker Build

Create a multi-stage Dockerfile for this Go service. Build stage with golang image, final stage with scratch or distroless. Copy only the static binary, set a non-root user, expose the correct port, and keep the final image under 20MB. Include a .dockerignore file.