Ship a repair command and a container

verify reports integrity problems and repair rebuilds derivatives from the
Originals, which is what makes the file layout trustworthy without a database.
The image runs TypeScript on Node 24 with no build step, writes only under
MENU_ROOT, and the provision script writes the untracked site.env using the
image's own hasher so the server needs no Node.

.dockerignore

@@ -0,0 +1,12 @@
+node_modules
+.npm-cache
+.tmp
+.dev
+.git
+public/fonts/OFL.txt
+docs
+test
+compose.yaml
+Dockerfile
+.dockerignore
+README.md