fix: require JWT auth on daily-chat endpoint, simplify Dockerfile Prisma generate

The /api/chat/daily route accepted a client-supplied userId with no
auth check. Require a verified Bearer JWT and derive the user from
the token instead. Also drop the manual openssl install and
--schema flag from the Dockerfile now that a second `prisma generate`
runs in the runner stage, and add a standard .dockerignore.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LwWLS2FYnE9ofqDF9hQFxA

.gitignore

@@ -31,6 +31,8 @@ yarn-error.log*
 
 # Testing
 coverage/
+playwright-report/
+test-results/
 
 # Secrets (DO NOT COMMIT)
 *.pem
@@ -50,9 +52,14 @@ coverage/
 deno.lock
 
 # SQLite dev database
+dev.db
+dev.db-journal
 prisma/dev.db
 prisma/dev.db-journal
 
+# Generated service worker (serwist build output)
+public/sw.js
+
 # Claude (workspace config, not project code)
 .claude/*
 !.claude/commands/