- docker-compose.yml: single service with data volume, ports 8443/9443/8080 - RUNBOOK.md: health checks, common operations (start/stop/backup/init), FIDO2 key registration, incident procedures (won't start, DB corruption, cert expiry, disk full, sync failures), escalation path - Makefile: added docker target Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>