fix(docker): salvage operational hardening from #1686 — .env readonly-var parser + xz-utils/git apt deps + root re-exec#1969

Merged

nesquena-hermes merged 2 commits into

fix/docker-env-readonly-vars

May 9, 2026

Commits on May 9, 2026

fix(docker): salvage operational hardening from #1686 (env readonly + apt deps)

nesquena-hermes
and
binhpt310
committed
fix(start.sh): NOPASSWD precheck on root re-exec — silent fall-through
nesquena-hermes
committed