Build and Push Docker Image / build-and-push (push) Failing after 20s
setup.sh starts the production server without SESSION_SECRET, so the new "refuse to start" check stopped the app after an update. When the variable is unset in production the server now makes a random secret once and keeps it in DATA_DIR/.session-secret (mode 600, git-ignored). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>