Add Fortify auth, Flux dark mode, demo seed, and Docker hot reload.

Protect recordings per user, seed a demo login on container start, and bind-mount the app with Vite HMR for local Compose development.

docker/entrypoint.sh

@@ -17,8 +17,11 @@ if [ ! -f database/database.sqlite ]; then
     touch database/database.sqlite
 fi
 
-# Never use a host Vite HMR file inside the container image.
-rm -f public/hot
+# Production images should not honor a leftover Vite HMR file from the host.
+# Development bind mounts keep public/hot so the Vite container can drive assets.
+if [ "${KEEP_VITE_HOT:-false}" != "true" ]; then
+    rm -f public/hot
+fi
 
 # Bind mounts may arrive as root-owned; keep the app and host tooling writable.
 chmod -R a+rwX database storage bootstrap/cache 2>/dev/null || true
@@ -28,6 +31,12 @@ if [ -z "${APP_KEY:-}" ]; then
     exit 1
 fi
 
+# Bind-mounted trees may lack vendor/ (image files are shadowed by the mount).
+if [ ! -f vendor/autoload.php ]; then
+    composer install --prefer-dist --no-interaction
+fi
+
 php artisan migrate --force --no-interaction
+php artisan db:seed --force --no-interaction
 
 exec "$@"

docker/php.ini

@@ -4,3 +4,7 @@ post_max_size = 10G
 memory_limit = 512M
 max_execution_time = 3600
 max_input_time = 3600
+
+; Pick up bind-mounted PHP changes without restarting FrankenPHP.
+opcache.validate_timestamps = 1
+opcache.revalidate_freq = 0