feat: add mariadb production support deploy hardening and recruiter drafts

deploy/README.md

@@ -21,6 +21,18 @@ Requirements:
 - Docker Compose plugin
 - reverse proxy in front (Nginx, Caddy, or Traefik)
 - `.env` file present on server in `/opt/job-tracker/app/.env`
+- network connectivity from the backend container to your `mariadb` container/service
+
+### Example production `.env`
+```env
+DATABASE_PROVIDER=mariadb
+JOBTRACKER_CONNECTION_STRING=server=mariadb;port=3306;database=jobtracker;user=jobtracker;password=REPLACE_ME
+AUTH_JWT_KEY=replace_with_long_random_secret
+AUTH_ADMIN_EMAIL=you@example.com
+AUTH_ADMIN_PASSWORD=replace_with_strong_password
+APP_PUBLIC_BASE_URL=https://your-domain.example
+SUMMARIZER_BASE_URL=http://summarizer:8001
+```
 
 ## Database recommendation
 For production, yes — use a real database.

deploy/deploy.sh

@@ -16,4 +16,12 @@ docker compose pull || true
 docker compose build
 docker compose up -d --remove-orphans
 
+sleep 5
+docker compose ps
+
+if ! docker compose ps | grep -q "backend"; then
+  echo "Backend service not running after deploy"
+  exit 1
+fi
+
 echo "Deployment complete: ${APP_VERSION} ${APP_COMMIT_SHA}"