M1: implement operational core

Demo auth, seed import/reset, dashboard, vehicle/booking list+detail, audit trail. Backend: 19 tests passing, ruff clean. Frontend: React Router shell, typed API client, responsive pages. Verified end-to-end via curl and browser.

compose.yaml

@@ -15,12 +15,17 @@ services:
     networks: [mobilityops]
 
   api:
-    build: ./backend
+    build:
+      context: .
+      dockerfile: backend/Dockerfile
     environment:
       MOBILITYOPS_ENV: ${MOBILITYOPS_ENV:-development}
       MOBILITYOPS_DEMO_MODE: ${MOBILITYOPS_DEMO_MODE:-true}
       DATABASE_URL: ${DATABASE_URL:-postgresql+psycopg://mobilityops:mobilityops@db:5432/mobilityops}
       TZ: ${TZ:-Europe/Brussels}
+      APP_SECRET: ${APP_SECRET:-replace-in-production}
+      DEMO_TODAY: ${DEMO_TODAY:-2026-08-01}
+      CORS_ALLOW_ORIGINS: ${MOBILITYOPS_PUBLIC_URL:-http://localhost:1228}
       KNOWLEDGE_PROVIDER: ${KNOWLEDGE_PROVIDER:-demo}
       RAGCORE_BASE_URL: ${RAGCORE_BASE_URL:-http://ragcore-api:8000}
       RAGCORE_TENANT: ${RAGCORE_TENANT:-northstar-mobility-demo}