fix: require JWT auth on daily-chat endpoint, simplify Dockerfile Prisma generate

The /api/chat/daily route accepted a client-supplied userId with no
auth check. Require a verified Bearer JWT and derive the user from
the token instead. Also drop the manual openssl install and
--schema flag from the Dockerfile now that a second `prisma generate`
runs in the runner stage, and add a standard .dockerignore.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LwWLS2FYnE9ofqDF9hQFxA

Dockerfile

@@ -7,11 +7,10 @@ COPY package.json package-lock.json* ./
 RUN npm ci
 
 FROM base AS builder
-RUN apt-get update && apt-get install -y --no-install-recommends openssl && rm -rf /var/lib/apt/lists/*
 WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
-RUN npx prisma generate --schema=./prisma/schema.prisma && npm run build
+RUN npx prisma generate && npm run build
 
 FROM base AS runner
 WORKDIR /app
@@ -23,6 +22,7 @@ RUN mkdir -p /app/data
 COPY --from=builder /app/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
 COPY --from=builder /app/prisma ./prisma
+RUN npx prisma generate
 RUN mkdir -p /app/public
 USER nextjs
 EXPOSE 3000