M4: PWA + Mobile-UX – Manifest/Service-Worker + Icons, Auf/Ab-Reorder, FAB, Touch-Targets + Safe-Area, Nav-Entdupidung, Heute-Highlight, Aktions-Trennung (Abhaken vs. Bearbeiten/Löschen), OIDC-Fixes + PWA-Tests

compose.yaml

@@ -4,16 +4,20 @@ services:
     container_name: svc-essensplanung
     restart: unless-stopped
     env_file:
-      - .env
+      # Secrets + Prod-Redirect-URI: APP_SECRET, API_TOKEN, KEYCLOAK_REDIRECT_URI
+      - .env.local
     environment:
       APP_ENV: prod
       APP_DEBUG: '0'
       DATABASE_URL: sqlite:////data/essens.db
+      DEFAULT_URI: https://essen.ljh31.de
+      KEYCLOAK_ISSUER: https://iam.ljh31.de/realms/family
+      KEYCLOAK_CLIENT_ID: essen
     volumes:
       - essens_data:/data
       - essens_var:/app/var
     healthcheck:
-      test: ['CMD', 'php', '-r', '$c=@fsockopen("127.0.0.1",8787); exit($c?0:1);']
+      test: ['CMD', 'php', '-r', '$$c=@fsockopen("127.0.0.1",8787); exit($$c?0:1);']
       interval: 30s
       timeout: 5s
       retries: 3