Compose service registers against git.wampler.us via act_runner,
mounts docker.sock for job execution. Secrets and runtime state
(.env, data/) kept out of git.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Books.wampler.us now routes through Caddy. Port 8083 no longer
exposed directly since traffic goes through the proxy network.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>