The image previously inherited everything from a `COPY . .`, including .env (secrets), local notes.db copies, and admin scripts that should not run in prod containers.
