fix(training): resolve Gin route conflicts and fix TTS Dockerfile

- Fix route param conflict: /content/publish/:id instead of /content/:id/publish
- Fix route conflict: /media/module/:moduleId for module media list
- Use Piper binary instead of pip package (ARM64 compatibility)
- Update frontend API URLs to match new routes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/lib/sdk/training/api.ts

@@ -288,15 +288,15 @@ export async function generateAudio(moduleId: string): Promise<TrainingMedia> {
 }
 
 export async function getModuleMedia(moduleId: string): Promise<{ media: TrainingMedia[]; total: number }> {
-  return apiFetch(`/media/${moduleId}`)
+  return apiFetch(`/media/module/${moduleId}`)
 }
 
 export async function getMediaURL(mediaId: string): Promise<{ bucket: string; object_key: string; mime_type: string }> {
-  return apiFetch(`/media/${mediaId}/url`)
+  return apiFetch(`/media/module/${mediaId}/url`)
 }
 
 export async function publishMedia(mediaId: string, publish?: boolean): Promise<{ status: string; is_published: boolean }> {
-  return apiFetch(`/media/${mediaId}/publish`, {
+  return apiFetch(`/media/module/${mediaId}/publish`, {
     method: 'POST',
     body: JSON.stringify({ publish: publish !== false }),
   })