fix(infra): plug operational defaults — pg restart, proxy timeout, env template (0.87.1)

Three operational gaps tripped a recent review:

1. **Postgres had no `restart:` policy.** tor / docker-socket-proxy /
   vision-manager all set `unless-stopped`; pg was the lone exception.
   A transient OOM or panic left backend's `depends_on: service_healthy`
   blocking every future restart and took the stack offline. Add
   `unless-stopped` on postgres and on backend/frontend in the base
   compose so the prod overlay is the same shape.

2. **`BACKEND_PROXY_TIMEOUT_MS` was documented but silently a no-op.**
   `.env.example` carried it but `docker-compose.yml` never forwarded it
   into the frontend service env, so the value never reached
   `hooks.server.ts`. Wire it through.

3. **`.env.example` omitted required env vars.** Operators copying the
   template got no admin bootstrap, no boot-seed crawler URL, no
   analysis configuration. Add: `ADMIN_USERNAME`, `ADMIN_PASSWORD`,
   `PRIVATE_MODE`, `ALLOW_SELF_REGISTER`, `CRAWLER_START_URL`,
   `CRAWLER_CDN_HOST`, `ANALYSIS_ENABLED`, `ANALYSIS_VISION_URL`,
   `ANALYSIS_VISION_MODEL`, `ANALYSIS_WORKERS`,
   `ANALYSIS_JOB_TIMEOUT_SECS`, `ANALYSIS_API_KEY` — each with the
   comment block that explains seed-vs-runtime semantics.

Also adds `frontend/vite.config.ts.timestamp-*.mjs` to `.gitignore` — a
crashed dev server leaves these transient files behind otherwise.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -18,6 +18,11 @@ services:
       interval: 5s
       timeout: 5s
       retries: 10
+    # Without this, a single Postgres crash leaves backend's
+    # `depends_on: service_healthy` blocking every future restart and
+    # takes the whole stack offline. Match the policy already set on
+    # tor / docker-socket-proxy / vision-manager.
+    restart: unless-stopped
 
   tor:
     # SOCKS5 proxy for the crawler, plus a control port so the backend
@@ -106,6 +111,7 @@ services:
     # development).
     expose:
       - "8080"
+    restart: unless-stopped
 
   frontend:
     build: ./frontend
@@ -115,8 +121,12 @@ services:
       # SvelteKit's hooks.server.ts proxies /api/* to this URL so the
       # browser only ever talks to :3000 and cookies stay same-origin.
       BACKEND_URL: http://backend:8080
+      # Per-request wall-clock cap for the /api/* reverse proxy. Defaults
+      # to 300000 (5 min) in hooks.server.ts; raise/lower via .env.
+      BACKEND_PROXY_TIMEOUT_MS: ${BACKEND_PROXY_TIMEOUT_MS:-300000}
     ports:
       - "3000:3000"
+    restart: unless-stopped
 
   # ----- Vision autoscaling (profile: ai) -----------------------------------
   # Two extra containers that idle-stop the mangalord-vision (llama.cpp)