Portal server mode for Dokploy: Dockerfile, PORTAL_URLS, PORTAL_SERVER

The results Portal in a Linux container (python 3.13-slim + ODBC Driver
18). PORTAL_SERVER=1: no Start / Stop (the bot runs on the Windows PC).
PORTAL_URLS: allowed hosts / origins, Secure cookie when all https.
RESULTS_DB_CONN (a SQL login) goes in Dokploy's environment, never here.
71 test files, 1222 tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Context.md

@@ -187,7 +187,7 @@ Get-ChildItem tests\test_*.py | ForEach-Object { "$($_.Name): $((python $_.FullN
 - Tests run offline against fake HTML pages in `tests/fixtures/` and fake DB
   connections; they never touch eCW or SQL Server (`test_cdp_browser.py`
   starts a local Chromium on a debug port). As of 2026-10-27: 71 test
-  files, **1220 tests** (full run 2026-10-27: 1220/1220) (earlier flaky, each
+  files, **1222 tests** (full run 2026-10-27: 1222/1222) (earlier flaky, each
   failed once and passed on rerun: test_verify_no_live_writes,
   depression_dx_pointer, progress_note_wait — watch them) (about 5 minutes for all of them).
 
@@ -623,7 +623,8 @@ the Portal (restarted 2026-10-26, [portal] terminal tab).
 
 History: `git log --oneline`.
 
-Last code commits: `f99dc17` (2026-10-27, Portal roles Super Admin /
+Last code commits: `70ba709` (2026-10-27, Portal server mode for Dokploy —
+§10), `f99dc17` (2026-10-27, Portal roles Super Admin /
 Admin / Viewer — §2), `61338b4` (2026-10-26, Sign-in page redesign + tab
 icon — §5), `a436489` (2026-10-26, Portal look: aligned header /
 footer, 7-day chart, today's reasons, pass rate — §5), `2d4d4fc`
@@ -761,8 +762,16 @@ test claim ids — new posts must not (§7).
 - **Gitea:** one overall snapshot update at the end of a day, when the
   operator asks (from the clone `D:\ecw-charge-validation`; operator
   pushes; 2026-10-26: `ba15a57` → `120fd68`).
-- **Portal for the client — Gitea + Dokploy (asked 2026-10-23, not
-  started).** Gitea `giteanew.ecareindia.com` (10.200.0.15, internal; its
+- **Portal for the client — Gitea + Dokploy (asked 2026-10-23; server
+  mode built 2026-10-27 `70ba709`, not deployed yet).** `Dockerfile`
+  (python 3.13-slim + ODBC Driver 18, copies only `src/` + `web/`,
+  `requirements-portal.txt`); env in Dokploy, never in Git:
+  `RESULTS_DB_CONN` (a SQL login; a Linux container cannot use
+  Trusted_Connection or, likely, the named instance — host,port),
+  `PORTAL_URLS` (hosts / origins; all-https = Secure cookie),
+  `PORTAL_SERVER=1` (set in the image: NoRunner, no Start / Stop). The
+  Runs page there is empty (events files stay on the bot PC). Earlier
+  notes: Gitea `giteanew.ecareindia.com` (10.200.0.15, internal; its
   HTTPS certificate is not in Git Bash's curl bundle) and Dokploy
   (`http://10.200.0.15:3000`, same server). The operator joins Dokploy and
   creates a **Private** Gitea repo themselves; nothing is pushed until they