Replace Dokploy runtime git clone with Dockerfile build to keep tokens out of the container, add nginx security headers and path whitelist, and scrub templates from the running image after HTML generation.
Co-authored-by: Cursor <cursoragent@cursor.com>
