Initial commit: thbd-portal, duplicated from elmi-portal

Rebranded for Thunderbird Portal (THBD): numbering prefix EL->TH, all
"ELMI"/"ЭЛМИ" UI strings genericized, ELMI's real contract templates and
company legal/bank details removed (not applicable to this company), fresh
VAPID keypair and encryption key, fresh single-migration schema history.
Same architecture as elmi-portal: Web Push notifications, unread-chat app
badge, cookie-session auth.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Gh2UXUQUVBWroWEnn1FLFG

Dockerfile

@@ -0,0 +1,26 @@
+FROM node:20-bookworm-slim
+
+# python3/make/g++ let npm fall back to compiling better-sqlite3/argon2 from
+# source if no prebuilt binary matches this platform.
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    python3 make g++ ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY package.json package-lock.json* ./
+RUN npm install
+
+COPY . .
+# `next build`'s page-data collection spins up several parallel workers that
+# each import the db client at module-eval time. If data/db.sqlite doesn't
+# exist yet, every worker races to create it from scratch, which can throw
+# SQLITE_BUSY. Migrating first, as its own isolated step, avoids the race
+# (lesson carried over from the sibling top-tickets project).
+RUN mkdir -p data && npm run db:migrate
+RUN npm run build
+
+ENV NODE_ENV=production
+EXPOSE 8088
+
+CMD ["sh", "-c", "npm run db:migrate && npm run bootstrap-admin && npm start"]