feat: add base image Dockerfile with curl, poppler-utils, imagemagick

PR 1 of 5 — minimal base image on debian:13.4 with:
- uv (from astral-sh/uv:latest)
- curl
- poppler-utils (pdftotext, pdfinfo, pdftoppm)
- imagemagick (convert, identify)

Verified all tools report version on build.

ai/Dockerfile

@@ -0,0 +1,23 @@
+FROM debian:13.4
+
+# Install uv (Python package manager), curl, poppler-utils, and imagemagick
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        curl \
+        poppler-utils \
+        imagemagick && \
+    rm -rf /var/lib/apt/lists/*
+
+# Install uv if not already present (debian:13.4 doesn't ship it)
+COPY --from=ghcr.io/astral-sh/uv:latest /usr/local/bin/uv /usr/local/bin/uv
+RUN uv --version
+
+# Verify all expected tools are available
+RUN curl --version && \
+    pdftotext -v 2>&1 | head -1 && \
+    pdfinfo -v 2>&1 | head -1 && \
+    pdftoppm -v 2>&1 | head -1 && \
+    convert --version | head -1 && \
+    identify --version | head -1
+
+CMD ["/bin/bash"]

ai/compose.yml

@@ -55,9 +55,9 @@ services:
     volumes:
       - /mnt/HoardingCow_docker_data/Hermes/data:/opt/data
       # Syncthing-shared org files — read-only view of user's agenda
-      - /mnt/HoardingCow_docker_data/Syncthing/org-ro:/opt/data/org-ro:ro
+      - /mnt/HoardingCow_docker_data/Syncthing/telos-ro:/opt/data/telos-ro:ro
       # Syncthing-shared inbox — write tasks here, they sync to user's laptop
-      - /mnt/HoardingCow_docker_data/Syncthing/org-rw:/opt/data/org-rw:rw
+      - /mnt/HoardingCow_docker_data/Syncthing/telos-rw:/opt/data/telos-rw:rw
     devices:
       - /dev/kfd:/dev/kfd
       - /dev/dri:/dev/dri
@@ -80,8 +80,8 @@ services:
       - TZ=America/Montreal
     volumes:
       - /mnt/HoardingCow_docker_data/Syncthing/config:/var/syncthing/config
-      - /mnt/HoardingCow_docker_data/Syncthing/org-ro:/org-ro
+      - /mnt/HoardingCow_docker_data/Syncthing/telos-ro:/telos-ro
-      - /mnt/HoardingCow_docker_data/Syncthing/org-rw:/org-rw
+      - /mnt/HoardingCow_docker_data/Syncthing/telos-rw:/telos-rw
     networks:
       - ai_backend
       - ai_net
@@ -129,6 +129,22 @@ services:
       - "303"
       - "26"
 
+  paperclip-db:
+    image: postgres:17
+    container_name: paperclip-db
+    restart: always
+    environment:
+      - POSTGRES_PASSWORD=${PAPERCLIP_DB_PASSWORD}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    volumes:
+      - /mnt/HoardingCow_docker_data/Paperclip/db:/var/lib/postgresql/data
+    networks:
+      - ai_backend
+
 networks:
   ai_net:
     external: true

versioncontrol/compose.yml

@@ -8,13 +8,10 @@ services:
       - USER_GID=1000
       - GITEA__server__ROOT_URL=https://code.lazyworkhorse.net
       - GITEA__actions__ENABLED=true
-      - GITEA__actions__DEFAULT_ACTIONS_URL=off
       - SSH_PORT=2222
       - SSH_LISTEN_PORT=2222
       # Enable Gitea Actions (act_runner required on host)
       - GITEA__actions__ENABLED=true
-      # Don't fetch actions from GitHub (offline mode + local only)
-      - GITEA__actions__DEFAULT_ACTIONS_URL=off
     volumes:
       - /mnt/HoardingCow_docker_data/Gitea:/data
     networks: