Add HarborForge stack to docker-compose

- Add hf_db_init sidecar that ensures the HarborForge database exists on
  every `compose up` (idempotent CREATE DATABASE IF NOT EXISTS), so the
  shared MySQL instance can host both hangmanlab and harborforge schemas
  without touching existing data.
- Wire hf_backend's DATABASE_URL directly from compose env vars and gate
  it on hf_db_init completing successfully.
- Add a mysqladmin-ping healthcheck on mysql so dependents can wait on
  service_healthy.
- Drop dead Vite runtime envs from hf_frontend (build-time only) and
  make wizard CORS_ORIGINS configurable via HF_FRONTEND_HOST.
- Seed .env.example with all variables the stack reads.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -37,6 +37,29 @@ services:
       - mysql_data:/var/lib/mysql
     networks:
       - app-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-p${MYSQL_ROOT_PASSWORD}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
+
+  hf_db_init:
+    image: mysql:8.0
+    restart: "no"
+    environment:
+      MYSQL_HOST: mysql
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      DB_USER: ${DB_USER}
+      HF_DB_NAME: ${HF_DB_NAME:-harborforge}
+    volumes:
+      - ./mysql-init/10-harborforge.sh:/init/10-harborforge.sh:ro
+    entrypoint: ["/bin/sh", "/init/10-harborforge.sh"]
+    depends_on:
+      mysql:
+        condition: service_healthy
+    networks:
+      - app-network
 
   hf_backend:
     image: git.hangman-lab.top/zhi/harborforge-backend:multi-stage
@@ -50,9 +73,10 @@ services:
       CONFIG_FILE: harborforge.json
       SECRET_KEY: ${HF_SECRET_KEY:-change_me_in_production}
       LOG_LEVEL: ${HF_LOG_LEVEL:-INFO}
+      DATABASE_URL: mysql+pymysql://${DB_USER}:${DB_PASSWORD}@mysql:3306/${HF_DB_NAME:-harborforge}
     depends_on:
-      mysql:
-        condition: service_healthy
+      hf_db_init:
+        condition: service_completed_successfully
     networks:
       - app-network
 
@@ -66,7 +90,7 @@ services:
       CONFIG_DIR: /config
       LISTEN_ADDR: "0.0.0.0:8080"
       MAX_BACKUPS: "5"
-      CORS_ORIGINS: http://hf_frontend:${HF_FRONTEND_PORT:-3000},http://127.0.0.1:${HF_FRONTEND_PORT:-3000},http://localhost:${HF_FRONTEND_PORT:-3000}
+      CORS_ORIGINS: ${HF_FRONTEND_HOST}
     networks:
       - app-network
 
@@ -75,12 +99,11 @@ services:
     ports:
       - "$HF_FRONTEND_PORT:3000"
     environment:
-      VITE_API_BASE: http://hf_backend:${HF_BACKEND_PORT:-8000}
-      VITE_WIZARD_PORT: ${WIZARD_PORT:-8082}
       FRONTEND_DEV_MODE: ${HF_FRONTEND_DEV_MODE:-0}
       NODE_ENV: production
     depends_on:
       - wizard
+      - hf_backend
     networks:
       - app-network