feat: sync current progress (P0 hardening + P1 observability + deploy docs/systemd)

deploy/docker-compose.yml

@@ -0,0 +1,24 @@
+version: '3.9'
+services:
+  asset-tracker:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+    container_name: asset-tracker
+    ports:
+      - "9530:9530"
+    environment:
+      - HTTP_ADDR=:9530
+      - DB_PATH=/app/data/asset-tracker.db
+      - APP_ENV=production
+      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
+      - ACCESS_TTL_MINUTES=30
+      - REFRESH_TTL_HOURS=168
+    volumes:
+      - ../data:/app/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:9530/healthz"]
+      interval: 30s
+      timeout: 3s
+      retries: 5