fix: harden week-two ordering, artwork and operations

infra/Dockerfile

@@ -8,6 +8,7 @@ WORKDIR /app
 COPY infra/requirements.txt infra/requirements.lock /app/infra/
 RUN pip install --no-cache-dir --require-hashes -r infra/requirements.lock
 COPY app /app/app
+COPY ops /app/ops
 # The local image carries the suites so they can run inside the stack network.
 # deploy/Dockerfile.api deliberately does not: tests are not part of what ships.
 COPY tests /app/tests