Ship a repair command and a container

verify reports integrity problems and repair rebuilds derivatives from the
Originals, which is what makes the file layout trustworthy without a database.
The image runs TypeScript on Node 24 with no build step, writes only under
MENU_ROOT, and the provision script writes the untracked site.env using the
image's own hasher so the server needs no Node.

compose.yaml

@@ -0,0 +1,19 @@
+# Local development. Production is the menu-admin playbook in ansible-playbooks;
+# this file exists so the container can be tried out without touching a server.
+#
+#   npm run seed && docker compose up --build
+services:
+  menu:
+    build: .
+    image: menu-admin:dev
+    ports:
+      - "3000:3000"
+    environment:
+      MENU_ROOT: /data
+      MENU_SITE_CONFIG: /etc/menu-app/site.json
+      SECURE_COOKIES: "false"
+      LOG_LEVEL: info
+    volumes:
+      - ./config/hopsngrains.site.json:/etc/menu-app/site.json:ro
+      - ./.dev:/data
+    restart: unless-stopped