[EvanProgramming]

Summary

• configure the non-root image to store SQLite and derived indexes under /data
• exclude local runtime data, caches, credentials, and build output from Docker context
• add a real replace-container persistence smoke test and document the durable volume path in all READMEs

Validation

• make check
• make lint
• make test (119 tests)
• git diff --check
• real two-process SQLite write/restart/API recovery smoke passed
• Docker smoke is configured as the GitHub Actions docker-persistence job; Docker is unavailable on the local machine

Fixes #22