Drop unnecessary VOLUME directive

Fix /app/data volume ownership for non-root user

Move db.sqlite3 to data/ dir, add premigrations system

Move LLM config from .env/dotenv to SiteConfig DB singleton

Add GIT_SHA env var to Docker image, print version on daemon startup

Extract rundaemon management command, refactor onboarding into pure dataclass + single apply() write path

Log follow-up message content before sending

Install nano in Docker image so onboarding editor prompts work

Forward args in /start so cloud-init --onboard runs Xvfb

Makefile: run up in foreground instead of detach+attach

Always start Xvfb, gate only VNC behind ENABLE_VNC

Skip interactive wizard when only optional questions remain

Mock fastembed in tests to avoid ONNX model dependency

Fix Playwright browser path for non-root users

Slim Docker image: multi-stage build, Chromium-only, conditional VNC