fix: explicitly set service=logto on default tenant router

Traefik couldn't auto-link the logto router when two services
(logto, logto-console) exist on the same container. This broke
ALL default tenant routing (sign-in, OIDC, API).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -82,6 +82,7 @@ services:
       - traefik.http.routers.logto.priority=1
       - traefik.http.routers.logto.entrypoints=websecure
       - traefik.http.routers.logto.tls=true
+      - traefik.http.routers.logto.service=logto
       - traefik.http.routers.logto.middlewares=logto-cors
       - traefik.http.middlewares.logto-cors.headers.accessControlAllowOriginList=${PUBLIC_PROTOCOL:-https}://${PUBLIC_HOST:-localhost}:3002
       - traefik.http.middlewares.logto-cors.headers.accessControlAllowMethods=GET,POST,PUT,PATCH,DELETE,OPTIONS