Docker hardening + first-run fixes

drizzle/0013_add_storage_public_base_url.sql

@@ -0,0 +1,2 @@
+-- Migration: Add storage_public_base_url column to users table
+ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "storage_public_base_url" text;