feat: add base image Dockerfile with curl, poppler-utils, imagemagick

PR 1 of 5 — minimal base image on debian:13.4 with:
- uv (from astral-sh/uv:latest)
- curl
- poppler-utils (pdftotext, pdfinfo, pdftoppm)
- imagemagick (convert, identify)

Verified all tools report version on build.

ai/Dockerfile

@@ -1,23 +1,14 @@
 FROM debian:13.4
 
-# Install system dependencies for Hermes agent with headless browser automation
+# Install uv (Python package manager), curl, poppler-utils, and imagemagick
-# Single RUN layer to minimize image size.
-#   PR #7 base: curl, poppler-utils, imagemagick for document processing
-#   New: chromium + xvfb for headless browser automation
-#   New: fonts for comprehensive Unicode/CJK/emoji coverage
-#   New: runtime libs required by Chromium
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         curl \
         poppler-utils \
-        imagemagick \
+        imagemagick && \
-        chromium \
-        xvfb \
-        fonts-noto-color-emoji fonts-unifont fonts-liberation fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf fonts-freefont-ttf \
-        libasound2t64 libatk-bridge2.0-0t64 libatk1.0-0t64 libatspi2.0-0t64 libcairo2 libcups2t64 libdbus-1-3 libdrm2 libgbm1 libglib2.0-0t64 libnspr4 libnss3 libpango-1.0-0 libx11-6 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxkbcommon0 libxrandr2 && \
     rm -rf /var/lib/apt/lists/*
 
-# Install uv (Python package manager)
+# Install uv if not already present (debian:13.4 doesn't ship it)
 COPY --from=ghcr.io/astral-sh/uv:latest /usr/local/bin/uv /usr/local/bin/uv
 RUN uv --version
 
@@ -27,7 +18,6 @@ RUN curl --version && \
     pdfinfo -v 2>&1 | head -1 && \
     pdftoppm -v 2>&1 | head -1 && \
     convert --version | head -1 && \
-    identify --version | head -1 && \
+    identify --version | head -1
-    chromium --version
 
 CMD ["/bin/bash"]

ai/compose.yml

@@ -129,6 +129,22 @@ services:
       - "303"
       - "26"
 
+  paperclip-db:
+    image: postgres:17
+    container_name: paperclip-db
+    restart: always
+    environment:
+      - POSTGRES_PASSWORD=${PAPERCLIP_DB_PASSWORD}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    volumes:
+      - /mnt/HoardingCow_docker_data/Paperclip/db:/var/lib/postgresql/data
+    networks:
+      - ai_backend
+
 networks:
   ai_net:
     external: true