fix: harden production release deployment

tests/unit/test_deployment_configuration.py

@@ -38,6 +38,8 @@ def test_unraid_uses_one_dockerman_container_with_ui_metadata() -> None:
     dockerfile = (ROOT / "Dockerfile.unraid").read_text(encoding="utf-8")
     entrypoint = (ROOT / "scripts" / "unraid_aio_entrypoint.sh").read_text(encoding="utf-8")
     assert "python:3.13-slim-trixie" in dockerfile
+    assert "DJANGO_DEBUG=0" in dockerfile
+    assert "PUBLIC_BASE_URL=https://build.invalid" in dockerfile
     assert "postgres-aio17" in entrypoint
     assert "pg_config --bindir" in entrypoint
 
@@ -47,6 +49,8 @@ def test_runtime_is_compatible_with_read_only_container() -> None:
     deploy_script = (ROOT / "scripts" / "deploy_docker.sh").read_text(encoding="utf-8")
 
     assert '"--no-control-socket"' in dockerfile
+    assert "DJANGO_DEBUG=0" in dockerfile
+    assert "PUBLIC_BASE_URL=https://build.invalid" in dockerfile
     assert "exec -T web python manage.py collectstatic" not in deploy_script
     assert "for required_host in 127.0.0.1 localhost" in deploy_script