fix(P0): Production compose removes direct backend/frontend ports, only nginx exposed

fix(critical): Production frontend URL, lockfile note, LLM schema validation, provider availability

fix: Production docker-compose also uses pgvector image

feat: Add unit tests, production Docker, rate limiting, WebSocket notifications, data export (GDPR), error handling