Add production Docker stack, observability, and CI automation

[ecatuogno1]

Summary

• add hardened Dockerfiles for the Next.js app, worker, and scheduler containers and supporting scripts
• introduce a docker compose stack with database, redis, reverse proxy, observability, and restic backup services plus secret/env templates
• document operations and home-lab deployment guidance and enable CI builds for all container images

Testing

• ⚠️ npm install (fails in the sandbox with 403 Forbidden from registry.npmjs.org)

---

https://chatgpt.com/codex/tasks/task_e_690bf5752470832d8caf698291971bd9

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Expand retention env var in Loki config

ops/loki/config.yml sets limits_config.retention_period to ${LOKI_RETENTION_DAYS}d, but the Loki service mounts this file unchanged and runs grafana/loki without -config.expand-env. Because Compose does not interpolate variables inside mounted files, Loki receives the literal string ${LOKI_RETENTION_DAYS}d, which is not a valid duration and causes the service to fail during startup. Use a concrete duration or enable environment-variable expansion before launching the container.

Useful? React with 👍 / 👎.