- docker-compose.yml: single service with data volume, ports 8443/9443/8080
- RUNBOOK.md: health checks, common operations (start/stop/backup/init),
FIDO2 key registration, incident procedures (won't start, DB corruption,
cert expiry, disk full, sync failures), escalation path
- Makefile: added docker target
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
