## ADDED Requirements

### Requirement: Dockerfile exists at project root
The system SHALL provide a multi-stage `Dockerfile` that builds the TypeScript source and produces a minimal production image running as a non-root user.

### Requirement: .dockerignore exists at project root
The system SHALL provide a `.dockerignore` that excludes development artifacts, secrets, and test files from the Docker build context.