fix: chown /app to su2a for auto-update write access

fix: write update temp file to /tmp instead of /app

feat: auto-update to latest GitHub release on restart

fix: use partial unique index syntax for admin ON CONFLICT

fix: create admin user from secrets on fresh DB

fix: bypass FUSE config corruption with env vars + enable registration on start

revert: restore original entrypoint from 5565702

fix: embed config in entrypoint, use DATA_DIR=/tmp to bypass FUSE entirely

fix: set PATH for hf in root context, unconditional config download

fix: download config via HF API instead of FUSE cp to avoid corruption

fix: use DATA_DIR=/tmp to bypass FUSE config read corruption

fix: copy config off FUSE in root context to avoid permission denied

fix: copy config off FUSE mount to prevent read corruption

revert: back to single-file backup (debug RUNTIME_ERROR)

feat: split DB backup into <2MB chunks to avoid FUSE write truncation

fix: use Python bcrypt at runtime

fix: use quoted heredoc + psql -v to prevent shell expansion of bcrypt hash

fix: use DO block for admin upsert, fix settings table column names

feat: auto-create admin user and enable registration on first start via psql

revert: restore original entrypoint

fix: run admin creation after server starts (tables must exist first)

feat: auto-create admin user from ADMIN_EMAIL/ADMIN_PASSWORD secrets on startup

fix: resolve RUNTIME_ERROR caused by FUSE bucket mount conflicts

PG local + bucket backup/restore, DB: su2adb

initial commit