This starts API/Admin on 3210, the synthetic wallet on 3230, and SQLite in
the lip-data volume. Before customer traffic, replace the development key,
disable demo seeding and wallet demo mode, configure OIDC, terminate TLS, move
multi-instance workloads to Postgres, and rehearse backup/restore and rollback.
Published ports bind to host loopback by default; the known Compose evaluation
key must never be exposed on a network.
Keep API, webhook, OIDC, database, and encryption credentials in a secret
manager. Never commit them, pass them as Docker build arguments, or include them
in fixtures, screenshots, logs, or support issues.
npm run verify, black-box conformance, adapter certification, and the exact
source’s refund/void rehearsal before cutover. See Postgres,
Reference wallet, and Security operations. 
