- Add ENV HOST=0.0.0.0 so workspace listens on all interfaces
(required for Traefik reverse proxy to reach it)
- Add ENV NODE_ENV=production for production-mode optimizations
- Remove apt-get install of nodejs (already in base image,
apt version would be older and could conflict)
- Only install tmux and curl in the workspace layer
- entrypoint-combined.sh: rewritten with proper logging,
graceful shutdown, configurable gateway health check