Server keys in etc/, bind in docker compose

- bin/gen-server-keys.sh: generate Ed25519 keypair to etc/server-service.{pub,key,env}
- main.go: read keys from file (ADMIN_PUBLIC_KEY_FILE) when env empty
- docker-compose: env_file etc/server-service.env, mount etc/
- bin/up.sh: auto-run gen-server-keys if etc/server-service.env missing
- ErrRegistrationNotConfigured for clearer 503 when keys not set
- etc/README.md, etc/.gitignore
- bin/gen-admin-key.sh for one-off key gen
- .env.example

Made-with: Cursor

docker-compose.yml

@@ -23,10 +23,14 @@ services:
       target: runtime
     image: momswap-backend:latest
     container_name: momswap-backend-api
+    env_file:
+      - etc/server-service.env
     environment:
       ADDR: ":8122"
       ADMIN_PUBLIC_KEY: "${ADMIN_PUBLIC_KEY:-}"
       DATABASE_URL: "postgres://${POSTGRES_USER:-momswap}:${POSTGRES_PASSWORD:-momswap}@db:5432/${POSTGRES_DB:-momswap}?sslmode=disable"
+    volumes:
+      - ./etc:/app/etc:ro
     depends_on:
       db:
         condition: service_healthy
@@ -42,10 +46,14 @@ services:
       target: dev
     image: momswap-backend:dev
     container_name: momswap-backend-api-dev
+    env_file:
+      - etc/server-service.env
     environment:
       ADDR: ":8122"
       ADMIN_PUBLIC_KEY: "${ADMIN_PUBLIC_KEY:-}"
       DATABASE_URL: "postgres://${POSTGRES_USER:-momswap}:${POSTGRES_PASSWORD:-momswap}@db:5432/${POSTGRES_DB:-momswap}?sslmode=disable"
+    volumes:
+      - ./etc:/src/etc:ro
     depends_on:
       db:
         condition: service_healthy