feat(release): publish minimal self-contained Magent source

compose.yml

@@ -0,0 +1,27 @@
+# Fresh installs: paste this file into a Portainer Docker Standalone stack.
+# Configure the site address and connected apps in Magent's setup wizard.
+# No Dockerfile, source checkout, .env file or shared default password is needed.
+# Existing installations must keep their original data mount and keys.
+services:
+  magent:
+    image: rephl3xnz/magent:latest
+    ports:
+      # LAN access by default. Restrict with a firewall; use HTTPS for public use.
+      # Only the frontend is published; it also serves /api.
+      - "3000:3000"
+    volumes:
+      # Contains the database, settings, cache and private generated keys.
+      - magent-data:/app/data
+    restart: unless-stopped
+    stop_grace_period: 30s
+    # For security, leave these settings unchanged unless you understand the risks.
+    read_only: true
+    cap_drop: ["ALL"]
+    security_opt: ["no-new-privileges:true"]
+    init: true
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,size=64m,uid=1000,gid=1000
+      - /app/frontend/.next/cache:rw,noexec,nosuid,size=128m,uid=1000,gid=1000
+
+volumes:
+  magent-data: