Summary

• add a minimal rootless Podman Containerfile with an allow-listed build context
• run as non-root UID/GID 1000 with a liveness healthcheck
• mount DeepSeek auth and proxy bearer key through Podman secrets
• fail closed when the proxy key secret is missing
• document a loopback-only, read-only, capability-dropped runtime

Closes #16.

Verification

• npm test — 41/41 passing
• Node syntax checks pass
• git diff --check passes
• static container security contract passes

Podman and Docker are not installed in the review environment, so the image was not built or run there. The README includes exact build, run, readiness, healthcheck, rotation, and cleanup commands for validation on a Podman host.